last executing test programs:

1m51.390888046s ago: executing program 0 (id=490):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
ptrace$getregs(0xc, 0x0, 0x869, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x73, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, &(0x7f0000006800)="10", 0x1)

1m48.304689149s ago: executing program 0 (id=498):
socket(0x80000000000000a, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x003\x00', @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x80000000, 0x400, 0x5, 0xd467, 0x10, "9b46842eb7d0518a22ebba8f0da7e01d0393db"})

1m47.58362738s ago: executing program 0 (id=501):
write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x2b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
pidfd_getfd(0xffffffffffffffff, r2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1, 0x0, 0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d})
syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r6})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f00000004c0)={0x0, &(0x7f0000000480), 0xa039})
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x9, 0x3, 0x7, 0x3, 0xfffffffa, 0x1ff}, 0x1c)

1m46.581282409s ago: executing program 0 (id=504):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001400010000000000000000002800110001"], 0x28}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000680)={0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getsockopt$packet_buf(r5, 0x107, 0xb, 0x0, &(0x7f0000000180))
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adcd1, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_usb_connect(0x6, 0x24, &(0x7f0000000480)=ANY=[@ANYRESHEX=r4], 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="ef437f94f6665c0c424fcb5fe742a9dc140dfff16339a8b374203eb651419f2a9562a9e8ffeb81bc04d6df7b186fb877b628e434584553d0"], 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r6)

1m44.807404772s ago: executing program 0 (id=508):
socket$kcm(0xa, 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000080)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1br\x14\xdb\xd3\xcd\xfd\xbdnC\xec)\x86\x14\x13\xeb\xb5\n-\xfeha\xfef\xecUO(\x91\x8d\x14\xec\x02u\xd9_FT\xaa\xda\x0e \xa0;\x10', 0x4)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8d1)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x441}, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x400], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[], 0x28}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x404500, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="090000000200000004000000070000007d436ff30791fe5f5fa2b14600000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r8}, 0x38)
ioctl$UI_DEV_CREATE(r1, 0x5501)

1m42.735498262s ago: executing program 0 (id=512):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x5)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r2}, 0x18)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x95, 0xcc, 0xc7, 0x10, 0xa168, 0x613, 0x6b38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x7d, 0xb0, 0x0, [{{0x9, 0x4, 0x41, 0xfa, 0x0, 0x73, 0x11, 0x74, 0x2}}]}}]}}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r2}, 0x18) (async)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) (async)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x95, 0xcc, 0xc7, 0x10, 0xa168, 0x613, 0x6b38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x7d, 0xb0, 0x0, [{{0x9, 0x4, 0x41, 0xfa, 0x0, 0x73, 0x11, 0x74, 0x2}}]}}]}}, 0x0) (async)

1m42.443784591s ago: executing program 32 (id=512):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x5)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r2}, 0x18)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x95, 0xcc, 0xc7, 0x10, 0xa168, 0x613, 0x6b38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x7d, 0xb0, 0x0, [{{0x9, 0x4, 0x41, 0xfa, 0x0, 0x73, 0x11, 0x74, 0x2}}]}}]}}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r2}, 0x18) (async)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) (async)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x95, 0xcc, 0xc7, 0x10, 0xa168, 0x613, 0x6b38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x7d, 0xb0, 0x0, [{{0x9, 0x4, 0x41, 0xfa, 0x0, 0x73, 0x11, 0x74, 0x2}}]}}]}}, 0x0) (async)

15.018824514s ago: executing program 1 (id=799):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000708000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0))
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000000480)=""/4096, 0x1000, &(0x7f00000001c0)=""/217, 0x2, 0x2}}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001000000000000009500000000000060"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
ptrace$cont(0x9, r3, 0x10000, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="d5aaaaaaaa9b4a6d"], 0x0)

10.430010929s ago: executing program 1 (id=814):
r0 = io_uring_setup(0xab1, &(0x7f0000000300)={0x0, 0xd674, 0x10000, 0x1, 0x380})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xbb600}, @uexit={0x0, 0x18, 0x80000000}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x60, {"480fc75e00c4e13855580766410f73df0048b8e5250000000000000f23d00f21f8351000000d0f23f8440f01c9470f793fb9ba0a0000b8c2010000ba000000000f308f2958967f000f01df670f01c2"}}, @uexit={0x0, 0x18, 0x1}], 0xf0})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0xffffffff, 0x0, 0xa, 0x2b, 0xfffffffffffffffa, 0x4604af9e, 0x8, 0x5, 0x3, 0xa, 0x6, 0x6, 0x8, 0xf7d, 0x6], 0x4000, 0x2c0000})
close(r1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
close(0xffffffffffffffff)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
semop(0x0, &(0x7f0000000240), 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x100, 0xb}]})

9.841107239s ago: executing program 2 (id=816):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, &(0x7f0000000280)=""/239, 0xef)
write$char_usb(r6, 0x0, 0x0)
syz_usb_disconnect(r5)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r7, r0, 0x1, 0x7f, &(0x7f0000000140)="f41e90fa8bf4b55ce577f67add8a44ebaef7e5a2b025124c156fbc60d073d9895e531d4833a1f807ca6f70dd5a9ed85cbe81944ec57d6bbf508abb8d941949876cf67aa9fc5a605c78030e7b1ac554b71415cd38f60e5f1263af6ff403ee43c406db003f57a8b542b60fcb649ddb322ac6ae0762d3e2c100cf3f53205c1fbb", 0x7, 0xd, 0x200, 0x5, 0x5, 0x0, 0xe8, 'syz1\x00'})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000b00000000000019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaffffffff867500000000000c0200b28c59881681fb520009020007651442eb050e7434954373561de584b703c80009e706d30bd224f80007cfa11ce16a6bc8ff2f7de96694ac5477a0dc91e5c6000a6580a5e97612fe86001273bc00000000000000000000001000f600105e000000030000000400000000008608000000000202000000"], 0x0)

8.711492766s ago: executing program 5 (id=820):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = getpid()
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40004000)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000000)=""/54, 0xfdb6}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

8.077111298s ago: executing program 1 (id=822):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f008535985fc0fea2e9dbabbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) (async)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f008535985fc0fea2e9dbabbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
pipe2(&(0x7f0000000100), 0x1000) (async)
pipe2(&(0x7f0000000100), 0x1000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="62a074"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x1)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

7.700567689s ago: executing program 3 (id=824):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109a00, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$selinux_relabel(0xffffff9c, &(0x7f0000000b40), 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f0000000400)=""/52, 0x34}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/3, 0x3}, {&(0x7f00000005c0)=""/14, 0xe}], 0x6, &(0x7f0000000680)=""/13, 0xd}, 0x1}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000800)=""/76, 0x4c}], 0x3}, 0x4}, {{0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000340)=""/23, 0x17}], 0x2}}, {{&(0x7f0000000f00)=@xdp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b80)=""/98, 0x62}], 0x2, &(0x7f0000000c40)=""/57, 0x39}, 0xe7a5}, {{&(0x7f0000000c80)=@l2, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000d00)=""/13, 0xd}], 0x1, &(0x7f0000000d80)=""/54, 0x36}, 0xe69b}], 0x5, 0x40000120, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x104821, &(0x7f00000008c0)='usrqq\xcf\xdc\xae\xabv\x90ea\xb9\xd0uota')
chdir(&(0x7f0000000140)='./file1\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, 0x0, &(0x7f00000002c0))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80064d12, &(0x7f0000000000))
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
init_module(&(0x7f0000001b40)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x57, 0xfa, 0x200000fae, 0x3, 0x0, 0x8, 0x18f, 0x40, 0x4f, 0x1010, 0xa, 0x38, 0x0, 0x101, 0x8, 0xc}, [], "7c57745124e7127c1a178b22085df8dc4ddbadf36162cb60415d26686814c740f33a29161241b13b00b9fb8e99bc308f9cecb09245e7c19480c51ee94de81cc617cc6d57c1fa1c23ee", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x989, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003800010328bd7002dadbc72502800000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)

7.229388967s ago: executing program 3 (id=825):
mount(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) (fail_nth: 8)

6.628087851s ago: executing program 3 (id=827):
ioprio_set$pid(0x2, 0x0, 0x2007)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000003880)=[{{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000600)="926a90d0f7c7ea5b8ba873410a63d384b8a78a8fd820d97041d10235fedf42db50bddc35804257461c0070ac424d7adef398f86d3456db", 0x37}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="140000fcff0000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x55}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b80)="457ab5be8977c75d4e3dac3a723cc641692b6b06067fbe67c7d5d0bd2405b587cb8618351c7aa1ad2361f9fc16c48c7da7fb35017325d07b312179635711cc025d99a0a0afb55f85434941a596c5155b875ff1253d9a6e3a7d911e562a1be1f51eec085efb0eae18e784b37a0db8b6f4308df53368dac98f0fed02680f771a8b44405f21325ad491114bab354714fef5c43cb4399a00", 0x96}, {&(0x7f0000000c40)="9d2654aee35a264334c938d0b679afc7edbc0d96989e2a354d78769f415aa0bce374bee5f4cc2f4acb442675b5768274be6e8b526d3c44616892f4f7d2e859889b853e8205479c3c999752255869f02b6956dc1e36efc6535f9dd8dca45663363a526c4dfd888c801b7717012805104b935e513fb18525667399bddfd9bb3f608869cc24cb", 0x85}, {&(0x7f0000000d00)="cb05e0651c4dd090e00fa4b47348b34a680fc0c56d1ceed1631b1ef32f0f00d636fd7a48a80bfa07c15996e79d97", 0x2e}, {&(0x7f0000000d40)="9e314170d0eb1adf3af833f27f6f426947fe85a2823133a6ec1b1e4c911b29f15262d183c71de946484c94588ea2c739dfdb896682176644076e0eeedc3000f82d7dcbab4a04a372335e59b9be7f92445641aaae7f66fbbdb7b312a396aeb7bb2f24aeb90db2e7b93d7198862612b6a27cd517aed1377f12c63274c4a942e52101c0d3dfc59abcab51d81b2364032ebcf43b6739dd4b2d0d542cc911dd6876acda69555a56483306b913b853b7321d9a7c9e4888e6a4de152eea65ba32de67", 0xbf}, {&(0x7f0000000e00)="da831c908cfdee3693d760af0193eb490d11311f73873debec3106916803419a263aa486d9a8de6512942d84cae8ee002589c6a4d8f5cf0ef6722c3a542463df0ecd45c58120758e85c434dde9f87e28a808cd1e28c619ac34fa34e89bad6f", 0x5f}, {&(0x7f0000000e80)="0a4a0703631121d4d35ca141276edd7230eb7fe3425f1021d6369efc3b52015ae2b438dfa85e7fdbf139caa098dd322b308e4ee417ca246e1545df846a94dc19e8fdf7", 0x43}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="7df3dcda2f1c84f2b701d0e51ab80a99e8e28a9fd504966027de4b754d9aeeaa9f60cf1d482f064e51de2eda35d19e39ae68954867b8e67077a34edfb914523fe3e8ca5f60d091a1ff329d6d34f854c12e904cd989c6ff3cc5d8b16ad36993259b32891244b43b78ef7dcfbc8fced32eda5039309bd9709d245d154648846a5747abe519122f9cf3b703c37a50f304115a088b0d66d0036c15a227f969c149b90fb8aca9a406456ca043fc823d32aec379a0782c9f59447a2fe25d1ecc1f2f8984098b26af3601222a74198a03bcecb2dde041843ddccc2e4a4f9b247dbf6d48b0e58694fa0b4531651a60e3644dfb300f2f535091dd8f72ada7e4abc94bfbe796dab413517a5c2cff99fc6227f6db5fc31781e3bf1eb64f58b2bea65d701fea6adcfc07c79532b36b06ccd8df29f71b7e8792598ab331f7a7b595743943bb5b2e2d971a258abaf3995a9119daaea1eaf12076665fc0d80f2eaa5a3fe4326ee78e08b310f1a0861cc7766a44fdaa78338e77230f2fe56b6d5115e422fa00d55432fdd172c9f26fc5a65d17f9462fb15982d0757fb4f315c0c290bd43b0054308274937b862e483600cd016cb359beb83a699eff41ea26afa7991cef5ac7aa9823d2b44b0d9a0eade8b9bf17db8fa0af532a1208100f1062ef716645f4ac8cfdbca4c4869165930e9af0d1b346458b7e5e1d3b2b28876337006eb0d068f9b38756aee7344410defc3dfca221891bfafb7305e0541f842661de8ea8f5fed1a0b031ab3646d2a5646667fdb83c9219f8adb8e608c2785652a98cde18784df1e8cce111657536e440c476741a9cde50534e98dd938cc71691c1a29be4c8f74b0341eddcefba582e4b29011ff8f74f8efcc57c919a789158701aefa12ecb8deeb5417935d956b3e3633bd4c80ef19f3983983bcc845392bb063e769f53dd10d996f95424c30d650469514f260fdf13c04c771997423c17f61214838be3aea34c8c187b52fab33a85a1a5a77494e5dc380a884d2775be0894a3e0e3ba0e23a01235252a118bb33b19ce4be31ba91b5534fd92ae3555aae3a1ac6458bd70685f5ad12c69d8d7c56b9cee2d4b4036e4b383e5fb215e21a139d85871ea63ce9ef37c14833c0bb84b477f96590920174921bd9cde8e35b37a24af78591b61a0000898ee83bc014f48632ca9790b22ec5ebd2db4f9cfd6566e831feb6b9ee4bed7318e1edcbc441ed8946cd961cb3262073864f0ff8355eb2bbc339330b42cfa5ece418d93733c5206f1e473a6cb4c7ebcbe2d507d39e26b61f1f702edb72e2f4285caef467b154e26bc3e5a4fd41fa0e187fae8361b6b8b290962856c3bf4ca0e224aaeb567a4c851462057de8bfa3023894acfc4ffed83fdb1813c76c6f5c6b495d98d4da82a3ea25d3f910e56c5399286ab37dd42316986f26c75da74feefe41bb965701741b0ebc92bd7ad316a2a23c21e130b8608d819bf823c85c6682f81ac5e2c09ddd5a93f4b3876412ba98b9a1ea41b77bd5e13d85a67e275ca7f760bf5bebb597352bc54dfb7ae0359ed24f64584074c90e72c77dfc663a9e7bc03454870b51b98a71a9a7f520c1968411647f33c8991d29ca83e5ccaceb7e0643850d8e91532aab9accdd110a9fb3e6c599c78c6ff36898bfeda5d549df084e3c4ccbea6ea419e9f57924632bb7951c1cafda2e91988141ea2153d5e0ffcebb8e8983c8b4cd6130b15e357449b967c34ec098d1f102b56f22d69a9b63b478fbab5ce123e9c490ad94437e114cd113ec5e755fe2971c91a2c8dc15d536e079dbaa25a7c2da49bf2053ede8b6bbdc50074cdf3a468308f07597dd8e1eb406b391508cd705e268e5e80cc029f5137d40a5b5e0bb9a6e669214383a1c3ff296a0b39cd2bbc53c9459949014ef228b3c591738acb40e351698ed8fda0067c2c06b0ca55744126a0712568ac9804bdf3aeea1ea0b6d93e7bd669ca584462d7d3f67d26d009b407bfb5ad9ad7efbdf323d7e7f7bd5a1e75b7a3686e23d17d4969b55cee7c6225574aab47d8c45206f6cd9923713281ea7390aa27f50deab221ae4a6e10a90c8bc1b5c5cc32e7367216bfcb3f4dc010fd2d8ac03c0e26c226ea854fb36683ba5b1ab28357b9091f5e1d6cf693fe7773eb72bbd63b663b462ee3f2743f5e087d20ed6ffcee68533a0fa7a342273eac2a556463bff78d2e483110c7f9b9ca72f04e532d9823dfaac3f949b9cc55694882184013267be27e7d83dbc80ed9c11fe3e546f48e936fe5e0e154fd802f44dc53d6e4210b7702c003bb67f328b47157a684b66368ab3fc4b6dbde295d60eafe278254322689fd825c2a4133ba0719904d15053849ac12f9a38ce9190f9ff8c0febddf8f7d13b16332579078fe475df3a318c9cf3af624b303991b4cc3a281d4b1e63c93eb827440a4286aa0a55526c68b029f8f3951328f8d4cbe4b069b8458ac39055398526471340140ce902f67ae98fa12503579e8dbf7e2c0e5b3bc1d030c714a513c0f56835663ec1df1da58bb361ac5b45a7582f88188da6d54460a4bbb663a65840b807d90881fa48efb0fd6d8b5924a86bb1d60758ccca7343e95d4000f5e7e749a5139547a248149870b275ac0b4891dffb01a6f9250ed06c4c1171e0d67101ebb113133445f6c9b3ac19f58718b702300b5d14b6f793cf3ad82750c0eb5357ac22918a6a21c39527279a86e75a8e290b745f011bd62253e15552559e3fb6e698d3fb4cd92b64324396d247d42771518b61500555b0b660a61d22944966a235e03f3c4c98fb5220d8e07f625e896bdb9543f1c55522c099ac3f5dd9fb97e65f903a986f25510b4c83d6b8e1cb3e8baf1233a542f372528a687ecc1bd1eb1c5c893adba49315c864292287f3853cbf5a904d3b88a5d217531731ceaa5a9bb7fdc4f737dbaa32724cb64ff06c77d1c0031c6e2c6ffb737dae3dcbb10d3f640527684d1ef9760021c6aaac2502f2ab1d1c62d93608771e72b1547fe8f12cd8c8ab4842af6495384c52c64dd3e37fb6d53fe771e5b40eae79183c9d6fbe4ccd53b67a03efe025c3772f6ce2072c36f3c5d695a7ced01e05bd89ecbbb0bb0ae98cf5e7325b383fd8560feff35490aa0e88a01d9731096229036726905b10b5173729c1b7618cbcd5e242a8bc978adfaf9d2de8dd8ba9097a91292e88c2f787a1acd37b6d69b369695e610a45432e294f1b8120c0d4d13db7e1054c0fe6a3bec3355cea2867cbbbfa01360048b8fda86ddeccbfd56b143648e1038c476ea6564e7a7881d4587d0e4fdd6ca6839a7ed3538f4d11edef0ba78fe3db04fbd9b3fdcc0a452a63826c84075d80a5b7b541ae65675dc5f60d9c26845c5c877adcec1797bfde12ca0f9c4638fe9056e033499e881d6f0478cac7f13b0d90b26b098947260e15f8ef4bed3508f769c83a0afb177075bf68510b47adf036ba19ca2208211dda0f7ba83c1673661a56fa9f315dc7537b6cf1e9d9555e4ea8c35b016434671c0f745130ab654f58f2b7133f86e2286c1968341ecc18834fa51d1ad00c58753307494f7a67f5cacd10b850c90eaa5215cbb748db6f84898bbd3fb65c9be26ee035b4551c0caefca2e9259b1e56bacb3015c1be3b2ebd7b725ba85422dc01644ba2bf0bfc21030f8969bae30ba9cc2fc22a0fbb7299ada0cfe889ab035c9615bab31f88aa5c155db2db67b2bddda4f1897b1c79d0a576dfd692c5fe72d3872dcbc2f098a09aa1b2efe9867f0f6d6128d6f24f2c4d53b46f5e8c15c1248a8ee55586e2673c5375fa6488c4dfa2d8805b07292b84245e4661b3b635357a474a5f1d97de0d864b8148ceb6e1663ecc15b43f3a3de8b2b1b435e5186ed5e2905e358ffec3aea14d6e8daaa06e102fe5e4eb3c5bf7e536e5b914c8702f5483fed2b07c23946b23fff2dbfb7f12ff22fc434c3b099cf11e4a86fb8856fc7401841994df0bb2e9a413ae5cdf9bad330aed46f0f680524b86266ed7000910b6f72f0bd10359d6781fc7ea925eb40364ecacbbb101788b9c97a62a7ea1b29742a603316edb96a57c25260317fe30f3cfee3286e5303cd3df5c7b9acc3fb8277698619b6827e56645e09b6170e10d930db76f7bf50b9782c603b4d1ea93f275cdedb5c4b0a34e732484cb61044cca32985ca35de174a297cf5747fa05de3f8dc0b955d54c664d548e0791e24dbf345cecebbcf6b0c67a5dd41a237106a52b3e5b422ae3ac731e4c08f84ef8ec33756e4e092b2ee653ff033b79683fa99b3a52d919b92c0afa5254e630241bc10b3138695f7e1542263b8ce6776bace211b698dc222a1e60264a85452e34bded15de509ca55e4b6c0f4bfc9cc3f972fc05a2f6ae973f5562006ad183f6ec75c7c9b71c4f3cd95878eb6b8ef545384b3a387bced4714522eeb84bc805038c71f88f590361515155473a92de80ebaab08fd43ee7506bd1a0661ae491efeb0b773cb6645446cc522dcc7de8a4a1739d17d3cb8a61b5eab8d4c698caa37ee707c45a534ed68177bae587dab20ae6be326b31ecd67536f5f3b81894932b412b6ca5ade045f14b9d5d475ec882c624347d71b8e08433cec072e9c273b712fd6fbcd560f02baa4dc9a453ba9ec34b995bacbe5679493793d89711846c35673f8fef63a332601af5b19a14343425d678447686ce784066b2b1a9de32d904491331f9b47b99f21cd6a937df5d9b643338f6e269a30584b4332c0393db6bd3fa9de931871c9d74b326947b2a91bef74f0868b0003d37f80ba04e0e8ad49c7fd7b2f4371347b94b7bf1d0b4915ef8543ce7508a87f94e8bce04e66be53452ed7c82949a07902a8171f23eb1c297e76d3018155ae27745c61a4b76d82430265461c4695d307687cfee4e62a66ad53f23673a251286650ceb917c84a829c11d802f2f0dc1496961dfa664697cd8e954687288bdc639e46508bb8aad39c66e442ec8a6c096ee52c67392ea3e3b67f559f57d16b240a6695265f998038e54f60812e7d064bdb00b21abe19437367985270404be8789f542e2bf20d34a86e67a8188b3de0a27c44503d42d516fa759a5ad37d86436a2ff59a6d74e5f008de3527be76c2b86efcf9d1873d3bd5f5beae7db6e0f730628db2257f04dcddfc08624e312dd802c84720c6f70616a1e6350b01028654e1ea01924fd51279d1cee15b8a87e9a6b1b0d779dd89f28746232d8f57f4e89407b06970c32203009319313c201b9f027048a21ac2e62165624ce51109cb449a6fcb59868f256a360938594222108296ac6960a15bf0f4ce3cddaef6354fb001bd9bd511ea7493011360ae2f3cde5575e933402f048b94f88ddda054357e8d03b43d76abadc28297ca31202ffbffc74651d779bf9b828e77053e9152fa912f9a502cfee9de197e2d787ef4e0d185246302b2c36d687d40abd3192e5affd47ace75b7be0a5ca36a3edc45869cd5cc03448200c03ef855125180354478215c781c7d8444648e65007ab5570df571c42ad9e636acc0d8371e5ff67f4f5ba49ba8b22f7b353ea4cd6231314fd962ab45a3b9747d21cb2171a28d0d4fb4cb01cdcb6904d85b17c228dd25578f60d43c979ec727102223480e646c4855c24d1b951c159d705c859a43a036464afa3ee9073673dde0ffc52b36d47741525e38d775def7af54e9059a18e14324eb30e4151d07d95b5e14d7b9f193b6ec3f8a1ca61fefe6db875ac48b66304c561010a2c98b9ac3a99734df18acb768b230de8412327379977a3dda7e449a56c187daa33afd94206674c39507d88fc4b535fd8a3768bda03", 0x1000}], 0x8, &(0x7f0000003940)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c14000000000000010000000100000084f0403c6f1c421aa14e2593945d89fdd0a24ce11cf16b5f642bded4f58623f59682075d5a1ee1a049b02049cbc948a36a97cdfb1b93943a60c0c20b3d1dc204870fd8443dcdd1118b35cf10abdc03f87ca5af80cdc29892798be4ff875458590fd4958f72d4a05edf0854ed10e81a84fbed83b23ba5ec44", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x8040}}, {{&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000001080)="b426850b8007e497d1eedd491137c906a522c8b55fb317f5c285def734f9a3db0a64632add8b0c11c80b886cec68f8c902776426a88e90da10f89b4ded809ccf226d01d6baa283512502f8da22dbabccb92993b312a6e1e160a9ef31dc3f482d2b0a10b730094a4d92fd2f81b89cb7312c734608e1fe2eaff41cc4b86ae199ad9a32553653a688cee96d38f95559562dcb3c91fd3b5911ae003244e804aace42d9c3f32c2b0dc0363ff45e24c02e7e3def3e12bd87f4628fa399b6732631fed69f6b2e31dc0e59a1512c605e2e33", 0xce}, {&(0x7f0000001180)="76c26bfd6cbeefe5f3102961c38c6367eceb243bff0396d5de7e3c37b215af7f7d7da53a638f1950e082c6650919f7a1a0a290b9fa2a5f77505c675aa8ec0ace1c1a7ac5cac16fb9c8a130335e0dec19b91f5ee0130d538c0a58faaa4c13cbacde", 0x61}, {&(0x7f0000003340)="fa68c2a2169039e80ef5cb1e7a6d726972077c4d82fbbe816e67e394a7c925a874f345abfc08c133c616ae311ed836a1a21a481f3eb8eb8390ad90a2402ff445a86739c7874cbfdb592acc637b26544932cfac45aafd11340afbd41b5d2af600b4a5863ca2e3e4420bbd5bf32d3e9c29d412bee89aa592da8e7645cdfcd1db6e4e34f7cfb7973bcca57724a908bbbdf036cda4960ae6efc4a4bafa21f3cb07d4529a34a5489171fb0d76e28f586ec395db32ac5c633eded07a1fad44911738e8fdd9da7e5fa5f4928d31ffd826d5c7f4d06126ffd569d22d59d1", 0xda}, {&(0x7f0000003440)="6e9797151b2b939ea90916274b313a556a89f107c75a0402849a87f3d8357ed427c1a242a1ccc5c65185be34b38df50a96ad7872836f002333b303d80340fdcedd4b5a1b4af56fe9cf2038a63d1b0919b34a2d8c0bc434894519f8fccdbbd0f9d437eab998dccefd36ede5276cb7f4066b0d8051ba2f4450f33828d4232d43c8a1cfe2", 0x83}, {&(0x7f0000003500)="a5e0f7eb92d0da1d421c34e5988406ca89347d05c0eed8768486e150430bb57367d8cb82d222bca14fdeb401e5b89cc6f5ff3850d883d6a498ef109cbc1ee6c1c05ac351d15d51542c772a1ead5d2084a1dd42e6cb513b421f2156aa1ca68933dea04b42889fbcf97037bd4346a83419cedd83652311ca213deae45dbb566004c0b54990042b30716965b44aa6f1b76c57f4fdd83c9afeada8fdc168f5aff6ac4e142ce55d1356402169f963c0a6d877aa44038938d3e4320b72afd111078cd45082e998bc1cd0a4e19f5f9745857ac145cc502ac825b00b3724947815effbc4", 0xe0}, {&(0x7f0000003600)="797706e9e775f057b44bf80c25e627f8e13af9f3189654b64507e8145c46d589db471e9f41a7b13a0b42ea575a63a09f7959f9b46ec50b42dc5a8ccab1c792f6b0ccd69c09955dbd83f25d53d4b220c44f137fb35fe27fd2faa94cf1644e41be14aa034f3a1fbf445ace8bca2b6bbe6cf75bcc326db1576d2bd352e35c2785c284f288ac2e705dbd7f7e2f6572cd843325d1fee48af641132b927b9f04d066184f0a9a367429f9a8d49388fbf60fa7a50d34be265165356c899d", 0xba}, {&(0x7f0000001200)="b4e866f9e5b37d8d0616c15643285c53108cf3fc5f7dc09bd139a2e1619a8056d64f39961669d2bc59e13aa3a2722e8baab95517f28e1b07284f37f6ac60b00e60efd567511456eb61a2ad8580dc4900c71170416d4f3c68bc9db1fa", 0x5c}, {&(0x7f00000036c0)="d2eb38acb615ed86e8222d012eb88b57148079898cb44b5f9c1085fc95278cdfc74333c0d81f9714bd88785670696651fe3a0cabefad9a926d036995a83c8a3a22d2e80eaa777f36a7654d8c524b637c36b4417ae6e8cd309302c18f2734db6c6f0b63a9fec836ea748ae53d06afd91d6d91a48b8372cbff31b551ae008b34a2cd4b990705488da03368ab42f8e32e42950309b7f1d3e03fce64399564f3794abc51d2f8766b851253c98f531ae6bdc5c73af6cf324a20f59cae5cc1ddfdcd5b3bf45bce", 0xc4}, {&(0x7f00000012c0)="7731d32a7ce98a96b34e3359b55ca8e188100f003ef5fa0277ee41", 0x1b}], 0x9, 0x0, 0x0, 0x24000480}}], 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x25, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x4, 0xfffffffe, 0x7, 0x1d, 0x100, &(0x7f00000000c0)="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"})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, {{0x9, 0xfffffffffffffff8, 0x2, r0}}}, 0x28)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000003a40)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1, 0x0, {{0x1d, 0x4, 0x2, 0xb, 0x74, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xf2, 0x1, 0xe, [{@remote, 0x6}]}, @ssrr={0x89, 0x23, 0x6, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @noop, @timestamp_prespec={0x44, 0x14, 0x7b, 0x3, 0x9, [{@rand_addr=0x64010101, 0x5}, {@private=0xa010102, 0x40}]}, @lsrr={0x83, 0x17, 0x12, [@multicast2, @broadcast, @broadcast, @local, @private=0xa010101]}]}}}}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000008c0)=""/134, 0x86, <r5=>0x0, &(0x7f00000006c0)=""/189, 0xbd}}, 0x10)
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000006633c1ba041c9cdc2bbf88851e95a66b602fa04191a7c6a064d8fe88ea45592f62a56913f2a0227ac841489db0f40a00000000000000cab5c72870a5b509ca8b777a0f1c8400b89cf579fba49887744aa93003f7defab3520b65b96a569bd65b93b761538924d3202ab3daa7c1d8748c8e1e420100000000000000d7ac352c617dc8109eb709c2feac3f2bb6368b5f72a9f4917b8a940d4d8dfa7bb7b035f6f22aa64db342d870da0134f9ac9b90250dd77a38e9422f694773c5a5"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r6}, 0x18)
r7 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10)
shmctl$IPC_RMID(0x0, 0x0)
r8 = socket(0xf, 0xef55872bc61de6d3, 0x1)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24)
r9 = syz_open_procfs(0x0, &(0x7f0000000880)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x5, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

6.426648256s ago: executing program 2 (id=828):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r0=>0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff, @local}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x18)
landlock_create_ruleset(0x0, 0x0, 0x0)

6.153501758s ago: executing program 2 (id=829):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xfd49, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1})
r6 = getpid()
sched_setaffinity(r6, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = socket(0xa, 0x1, 0x0)
fgetxattr(r7, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c)
socket$inet(0x2, 0xa, 0xffffffd2)

6.119432985s ago: executing program 4 (id=830):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x10, 0x3ec, 0x4, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x0)

4.826892794s ago: executing program 4 (id=831):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x11)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000000080))
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f0000000100))
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
unshare(0x22020600)
r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0)
read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020)
r11 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
sendmsg$tipc(r11, 0x0, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab0000e2ff00000000320000000800170156000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

4.74962608s ago: executing program 1 (id=832):
r0 = io_uring_setup(0xab1, &(0x7f0000000300)={0x0, 0xd674, 0x10000, 0x1, 0x380})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xbb600}, @uexit={0x0, 0x18, 0x80000000}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x60, {"480fc75e00c4e13855580766410f73df0048b8e5250000000000000f23d00f21f8351000000d0f23f8440f01c9470f793fb9ba0a0000b8c2010000ba000000000f308f2958967f000f01df670f01c2"}}, @uexit={0x0, 0x18, 0x1}], 0xf0})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0xffffffff, 0x0, 0xa, 0x2b, 0xfffffffffffffffa, 0x4604af9e, 0x8, 0x5, 0x3, 0xa, 0x6, 0x6, 0x8, 0xf7d, 0x6], 0x4000, 0x2c0000})
close(r1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
close(0xffffffffffffffff)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
semop(0x0, &(0x7f0000000240), 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x100, 0xb}]})

4.633110274s ago: executing program 5 (id=833):
bpf$OBJ_GET_MAP(0x6, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
read(r1, &(0x7f0000000200)=""/208, 0xd0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x15, @time={0x80, 0xff}})
r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(r2, 0x0, 0x80000000, 0x0)
wait4(r2, 0x0, 0x20000000, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0xe4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x2, 0x0, 0x80, {0xffffffffffffffff, 0xd000, 0x1}}, "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", "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"})
socket$phonet(0x23, 0x2, 0x1)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}})

4.629951614s ago: executing program 2 (id=834):
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4)
sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000"], 0xf8}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

4.2624857s ago: executing program 3 (id=835):
r0 = io_uring_setup(0xab1, &(0x7f0000000300)={0x0, 0xd674, 0x10000, 0x1, 0x380})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000040), 0x1)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x80)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xbb600}, @uexit={0x0, 0x18, 0x80000000}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x60, {"480fc75e00c4e13855580766410f73df0048b8e5250000000000000f23d00f21f8351000000d0f23f8440f01c9470f793fb9ba0a0000b8c2010000ba000000000f308f2958967f000f01df670f01c2"}}, @uexit={0x0, 0x18, 0x1}], 0xf0})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[0x4, 0xffffffff, 0x0, 0xa, 0x2b, 0xfffffffffffffffa, 0x4604af9e, 0x8, 0x5, 0x3, 0xa, 0x6, 0x6, 0x8, 0xf7d, 0x6], 0x4000, 0x2c0000})
close(0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$qrtr(0x2a, 0x2, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = semget$private(0x0, 0x1, 0x19)
semop(r4, &(0x7f0000000240), 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r6, 0x4b45, 0x2)
ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x100, 0xb}]})

3.81289924s ago: executing program 3 (id=836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000006010100000000000000000200000a0900020073797a31000000000900030073797a31000000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x4000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r3, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215", 0x55, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_io_uring_submit(0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee01}}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x33, 0x38, 0x36, 0x38]}}}}]})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r7, 0x8010aebc, &(0x7f0000000040))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010)
listen(r5, 0x6)

2.550634276s ago: executing program 3 (id=837):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000001780)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x2, 0x34, 0x10, 0x6d}, 0xf4, &(0x7f0000000140)=ANY=[], 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x500a}}, {0x0, 0x0}]})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000005280))
syz_usb_ep_write(r0, 0x81, 0xf9, &(0x7f00000002c0)="b9425ba57327b36b600e9b99000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f45d5d1f0cc75dd3e26b41c356484e46fd66e3f2c7893ad0000ed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4cd859ddc9e4800448aab0000000000000d75f34bb50d8d708400"/249)
socket$nl_generic(0x10, 0x3, 0x10)

2.475925007s ago: executing program 5 (id=838):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a80900e1fd030030"], 0xfdef)

2.35743477s ago: executing program 1 (id=839):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1000000}]}, 0x30}, 0x1, 0x6c00, 0x0, 0xc040}, 0x0)

2.257479992s ago: executing program 5 (id=840):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="4009030000df5e0e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000006c0), 0x121840, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e20, 0x3, @empty, 0x9}}, 0x0, 0x0, 0x50, 0x0, "d5dd0b9910a4d63ea0ed9d87e8c9130c39fb0348159cec316d4f1164c2fc120b50c15a2c2517c6071d90664185d1ab96b589ebded82751751bd1d95b2c1fabdbb71aa3154d71c178c4b3da0a422bb615"}, 0xd8) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0xbe0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0x22, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x7f, 0xe, 0x1, {0x22, 0xa8b}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xfb, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xfc, 0x2, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x98, 0x8, 0xef, 0x5}, 0x94, &(0x7f0000000080)={0x5, 0xf, 0x94, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x6, 0x5c6b}, @generic={0x88, 0x10, 0x1, "cbc4077fb5e1d1ce9d0f7d29ba4bd821e51e31ba35106038ac186eabd560a72b4c3db0994057f29b3f06f9ae8070b0eeefa01efb18965ca9091f6e4459f5d83d4998d6ad0331d185c8b7ea59af5eb92edbce5a8c9b08d3fcfeb66660417b3cda0528f4571c28b2e2df308508c7076d0109d58d5771d2cbb3ebc7982d8bf5c98ab200a5000a"}]}, 0xa, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0xdc, &(0x7f0000000180)=@string={0xdc, 0x3, "28cf729d8024b6620955e84d51c1af36cc96962fed3be8cd12ed77999b4430e3bedd811ad2887eb691752183c813deca3e08b7104ad922861e936cb7b3c95b14dad268d4e045af6d601c2df1f34105cafd097bef82abe6a6b99e0171a3539f1a13040eb93087916b4268dbaacf1ca3563194cccb3b23b9a6092f83a266f3121bbc0388e0db27472d61104cac3a3b7b3343d510c046a326506e00f685c6faa3a5c224dc0a3818a319e33cad5970011bfff37aae6f9a8e2235cf40fb287baef409c28bdbc7065b626c8210dee030bb2860b9cab5d782c3918479a8"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x401}}, {0x19, &(0x7f00000002c0)=@string={0xfffffffffffffdd2, 0x3, "cdabef3b491159c332e84c4fbd0d7f6492d5176a272aca"}}, {0xf8, &(0x7f0000000440)=@string={0xf8, 0x3, "1be12af56194bcacb98a99bddd95285da02ad73a69393ed47d9ad1472f7ae0c5d4fbdbb9578528efd7809f64d5883afc653dbf98024e165a2cdd8691145519a5b9f5781e2585d7b4967d3157ee24a6e14206156cb14018e1ed765cfca59355d9f9604bdb273967abf09f4b5d3b4f0481359a60cdf3c841920c79a08174b587a8a69b5806664a5303ceca8bc2962ada8950eba0f8041df4c6e262e4401904ee33912d426be8e326e238180fe216d7c2285cc18c37617fee2b7cd85b13535b0d48d9a7216bbe30e11ba3d9bec32a7ab9114141bd99d4f871e9acca29b852a046927300c637bb70a9f3247db89cf8b6721ca4b1337a470d"}}, {0x21, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x827}}, {0xf6, &(0x7f0000000a00)=ANY=[@ANYBLOB="f603d5a3db0e9bf586af801fa321370df1e41f12fc7b2a4ca60668e753ecb96483ea3b32ab3667efa435ca0d8b6dc6f1578cbf150d2135a2d41df1238d9c37b5aef79f885dc853d6108a4bee15af87b7d2501cc755bfa5c49c9f25ff558b6c4797c4b87d4d7553e0873a22134a6eca3bc71eabdc60ec6f294e87c4f44c5423893b8f8e1e0de2024f6ce84baa5ab6b39041b45f3ef48f64366cd50f938f8149939def2e502929ec69e670857d541daa05acf224cbe5a8727d10f3d3552646e401f8ae81afee528e9cc4e4a9bb628231eac73716f113c8ccc1570726a778b7aa8da215a4e34524643a109e4540b1d54636bd99221ce5e0015982365905653485e31ba23446695ee4ae84d8d50bb600a10064a2dd6b78c48c47b308917d25c0536b8750cffbb99cbdfb59fa5dd727b93a8c642f07f7b286b21f6197e4e5dc0a5eced0a7a81c2e3e52341f6dab4990786808da2908d6dcb0cf86a8391a2102d5c83ce41a991f6923b87549e59f2f4c85"]}, {0x4, &(0x7f0000000640)=@lang_id={0x0, 0x3, 0x4001}}, {0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="5c03f9afea4b1e60f1ee9543398325b014031aba7031fe436a3681d7fcce982af9070000006e5ee7ac5d84e699a47c4d722f38c1bef63cbbe198fc2a8c7e438e4114b0a49cf1398b73febf51a134e74be3a60cece362baf6b32d1ad5d33ba25f62583cda52"]}, {0x4, &(0x7f0000000680)=@string={0x0, 0x3, "b2eb239ed436f95ed98e587e2681e15dc2ab741fc29380e6bb0f3a41df036a1b67f6f9d4f1bde94ad2c17e5b0f8b74cafdeb4a99af188c64"}}]})

2.222889691s ago: executing program 1 (id=841):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xbb8)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0))

2.218650061s ago: executing program 2 (id=842):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
creat(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[])
r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0xfffffffe, 0x35b}, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0xfffffffffffffffd, 0x0, 0x40000})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)

2.148312592s ago: executing program 4 (id=843):
r0 = gettid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2b971e195bcb209ec186f06b100d36d0181488e179f185b83f0a938258acf8fff35e223528dbea6c927bdd2819de9c0c30529a2248be2db9953a90461455b1d1f1b1b7e7b70a68705c29d563cef8992af0236dd850c5b1b240894f7b4c57ef7b2e0830d1640a38dd47df723a4865884f7ff41aac82a5b9a86a373fe85abd67844f43f3fd9e5e16f6b85dfc4a5865cdef1b358e2bc9d6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0xb, 0x34325842, 0x500, 0x2d0, 0x3, @discrete={0x7, 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
tgkill(r0, r0, 0x26)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_timedsend(0xffffffffffffffff, 0x0, 0x2000, 0x0, 0x0)
kexec_load(0xf5, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27)
io_submit(0x0, 0x4, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x10, 0xffffffffffffffff, &(0x7f0000000240)="58f2f3401f8809517f9a22504e94ac7a4b6b4c0a049b4133d42845b89aa5de1c67b3700bd2b0c2c221261437c178413920265009cf5c73afaad3e8ad2252ef47f70836ccf489c519dc0bb52a562705d3609ff777040e468a455494a358e1c43f0e51e134", 0x64, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000000380)="4371035397d6d85d4dad12b9bbc7bcd12b96e558e1ca0aa50cdad3bca3326407da728c548f3a6363c57429583a4d386a7acd8c8881ed879a", 0x38, 0x6a38dcf6, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000580)="cef47d288a13a3303fe911b2870874a1bf14b45b024279268951df2bb4757a966d96da3f4a99f437ab69df51de7ae8fd52a2bdefdbbcd344edde94088dfdef9fbf3193e5ebcee7f4e5cbd86a3cfb9de0d889cce91f8e", 0x56, 0xbf, 0x0, 0x2}])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
r6 = socket(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0)
capset(0x0, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x20, 0x1, 0x5, 0xab1, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010102}}}})
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "00000000ade82a8017000000000000000100"})
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8)

1.144909726s ago: executing program 2 (id=844):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004f21006000670000000690780a010102e00000014428e450000000000000020000009f0000000880000000000000010000000000000000000000000000000100004e2400004e2300000002000000b000"/110], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80100)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r7})
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40)
write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12)
ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @pic={0x8d, 0x8, 0x5, 0x0, 0x3, 0x6, 0x7f, 0x84, 0x81, 0x4, 0x5, 0xe, 0xfd, 0x95, 0x6, 0xa}})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0))
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00')
setns(r9, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)

920.492016ms ago: executing program 4 (id=845):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xc, 0x0, &(0x7f0000000900)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001980)="d527cf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784db4600a1b79ec37b13575abaf52a8afe4"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)

878.740513ms ago: executing program 4 (id=846):
r0 = io_uring_setup(0xab1, &(0x7f0000000300)={0x0, 0xd674, 0x10000, 0x1, 0x380})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000040), 0x1)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x80)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xbb600}, @uexit={0x0, 0x18, 0x80000000}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x60, {"480fc75e00c4e13855580766410f73df0048b8e5250000000000000f23d00f21f8351000000d0f23f8440f01c9470f793fb9ba0a0000b8c2010000ba000000000f308f2958967f000f01df670f01c2"}}, @uexit={0x0, 0x18, 0x1}], 0xf0})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[0x4, 0xffffffff, 0x0, 0xa, 0x2b, 0xfffffffffffffffa, 0x4604af9e, 0x8, 0x5, 0x3, 0xa, 0x6, 0x6, 0x8, 0xf7d, 0x6], 0x4000, 0x2c0000})
close(0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$qrtr(0x2a, 0x2, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = semget$private(0x0, 0x1, 0x19)
semop(r4, &(0x7f0000000240), 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r6, 0x4b45, 0x2)
ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x100, 0xb}]})

622.168614ms ago: executing program 4 (id=847):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000140))
syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0xa, 0x8000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
read(r2, &(0x7f0000000200)=""/90, 0x5a)
sendmsg$rds(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x18}, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff020400", 0x4)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x800, 0x0, @loopback, 0x3}, 0x1c)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

577.457686ms ago: executing program 5 (id=848):
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0xfe, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

0s ago: executing program 5 (id=849):
r0 = io_uring_setup(0xab1, &(0x7f0000000300)={0x0, 0xd674, 0x10000, 0x1, 0x380})
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xbb600}, @uexit={0x0, 0x18, 0x80000000}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x60, {"480fc75e00c4e13855580766410f73df0048b8e5250000000000000f23d00f21f8351000000d0f23f8440f01c9470f793fb9ba0a0000b8c2010000ba000000000f308f2958967f000f01df670f01c2"}}, @uexit={0x0, 0x18, 0x1}], 0xf0})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0xffffffff, 0x0, 0xa, 0x2b, 0xfffffffffffffffa, 0x4604af9e, 0x8, 0x5, 0x3, 0xa, 0x6, 0x6, 0x8, 0xf7d, 0x6], 0x4000, 0x2c0000})
close(r1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
close(0xffffffffffffffff)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
semop(0x0, &(0x7f0000000240), 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x100, 0xb}]})

kernel console output (not intermixed with test programs):


[  260.403298][ T8024]  kmemdup_noprof+0x29/0x60
[  260.403319][ T8024]  sidtab_sid2str_get+0x17a/0x680
[  260.403358][ T8024]  sidtab_entry_to_string+0x33/0x110
[  260.403386][ T8024]  security_sid_to_context_core+0x35c/0x640
[  260.403415][ T8024]  avc_audit_post_callback+0x109/0x8f0
[  260.403445][ T8024]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  260.403471][ T8024]  ? skb_put+0x138/0x1b0
[  260.403496][ T8024]  ? audit_log_n_string+0x253/0x540
[  260.403532][ T8024]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  260.403558][ T8024]  common_lsm_audit+0x24b/0x300
[  260.403585][ T8024]  ? __pfx_common_lsm_audit+0x10/0x10
[  260.403618][ T8024]  slow_avc_audit+0x186/0x210
[  260.403645][ T8024]  ? __pfx_slow_avc_audit+0x10/0x10
[  260.403671][ T8024]  ? find_held_lock+0x2b/0x80
[  260.403693][ T8024]  ? avc_has_extended_perms+0x33a/0x1090
[  260.403715][ T8024]  avc_has_extended_perms+0xa40/0x1090
[  260.403744][ T8024]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  260.403764][ T8024]  ? kasan_quarantine_put+0x10a/0x240
[  260.403790][ T8024]  ? lockdep_hardirqs_on+0x7c/0x110
[  260.403816][ T8024]  ? find_held_lock+0x2b/0x80
[  260.403845][ T8024]  ? tomoyo_path_number_perm+0x18d/0x580
[  260.403879][ T8024]  ? __pfx___might_resched+0x10/0x10
[  260.403912][ T8024]  ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450
[  260.403945][ T8024]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  260.403985][ T8024]  ? hook_file_ioctl_common+0x145/0x410
[  260.404011][ T8024]  ? selinux_file_ioctl+0x180/0x270
[  260.404036][ T8024]  selinux_file_ioctl+0x180/0x270
[  260.404065][ T8024]  security_file_ioctl+0xc6/0x240
[  260.404091][ T8024]  __x64_sys_ioctl+0xb7/0x200
[  260.404117][ T8024]  do_syscall_64+0xcd/0x260
[  260.404143][ T8024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.404162][ T8024] RIP: 0033:0x7fc30018e969
[  260.404178][ T8024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.404197][ T8024] RSP: 002b:00007fc3010b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.404215][ T8024] RAX: ffffffffffffffda RBX: 00007fc3003b5fa0 RCX: 00007fc30018e969
[  260.404228][ T8024] RDX: 0000200000000040 RSI: 00000000000089e2 RDI: 0000000000000004
[  260.404239][ T8024] RBP: 00007fc3010b4090 R08: 0000000000000000 R09: 0000000000000000
[  260.404251][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.404262][ T8024] R13: 0000000000000000 R14: 00007fc3003b5fa0 R15: 00007ffcfec73b28
[  260.404289][ T8024]  </TASK>
[  260.719020][   T30] audit: type=1400 audit(1746797384.402:890): avc:  denied  { ioctl } for  pid=8018 comm="syz.4.548" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  260.743728][   T30] audit: type=1400 audit(1746797384.462:891): avc:  denied  { ioctl } for  pid=8023 comm="syz.2.549" path="socket:[16151]" dev="sockfs" ino=16151 ioctlcmd=0x89e2 ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  260.838413][ T8028] qnx4: no qnx4 filesystem (no root dir).
[  261.149124][ T7915] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  261.179886][ T7915] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  261.273878][ T7915] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  261.314553][ T7915] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  261.567210][ T5817] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  261.934612][ T7915] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.966809][ T5817] usb 5-1: device descriptor read/64, error -71
[  261.997763][ T7915] 8021q: adding VLAN 0 to HW filter on device team0
[  262.015539][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.022774][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.079515][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.086816][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.231087][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'.
[  262.239814][ T5817] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  262.287138][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'.
[  262.556974][ T5817] usb 5-1: device descriptor read/64, error -71
[  262.783815][ T8067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.558'.
[  263.486148][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.527409][ T5817] usb usb5-port1: attempt power cycle
[  263.801075][   T30] audit: type=1400 audit(1746797387.941:892): avc:  denied  { read } for  pid=8081 comm="syz.3.562" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  263.832977][ T8082] netlink: 104 bytes leftover after parsing attributes in process `syz.3.562'.
[  263.845539][   T30] audit: type=1400 audit(1746797387.961:893): avc:  denied  { open } for  pid=8081 comm="syz.3.562" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  263.890160][ T5817] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  263.897138][   T30] audit: type=1400 audit(1746797387.971:894): avc:  denied  { ioctl } for  pid=8081 comm="syz.3.562" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  263.897844][ T5925] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  263.988462][ T7915] veth0_vlan: entered promiscuous mode
[  264.025983][ T7915] veth1_vlan: entered promiscuous mode
[  264.037926][ T5817] usb 5-1: device descriptor read/8, error -71
[  264.067307][ T7915] veth0_macvtap: entered promiscuous mode
[  264.083677][ T7915] veth1_macvtap: entered promiscuous mode
[  264.112353][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.127134][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.140242][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.151904][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.164932][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.168495][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.175869][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.204324][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.207825][ T5925] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[  264.221703][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.239352][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.246941][ T5925] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  264.263196][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.280656][ T5817] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  264.288883][ T5925] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024
[  264.305615][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.318072][ T5817] usb 5-1: device descriptor read/8, error -71
[  264.322333][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.335003][ T5935] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  264.335246][ T5925] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  264.376930][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.383088][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  264.387891][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.409394][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.418904][ T5925] usb 2-1: Product: syz
[  264.423100][ T5925] usb 2-1: Manufacturer: syz
[  264.426825][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.430657][ T5817] usb usb5-port1: unable to enumerate USB device
[  264.439531][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.445466][ T5925] usb 2-1: SerialNumber: syz
[  264.470470][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.494568][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.520032][ T7915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.540461][ T7915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.543593][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0
[  264.549274][ T7915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.549309][ T7915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.575240][ T8096] FAULT_INJECTION: forcing a failure.
[  264.575240][ T8096] name failslab, interval 1, probability 0, space 0, times 0
[  264.633398][ T5935] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  264.654841][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.676262][ T5935] usb 3-1: config 0 descriptor??
[  264.714677][ T8096] CPU: 1 UID: 0 PID: 8096 Comm: syz.4.565 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  264.714704][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  264.714714][ T8096] Call Trace:
[  264.714720][ T8096]  <TASK>
[  264.714726][ T8096]  dump_stack_lvl+0x16c/0x1f0
[  264.714780][ T8096]  should_fail_ex+0x512/0x640
[  264.714808][ T8096]  should_failslab+0xc2/0x120
[  264.714827][ T8096]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  264.714855][ T8096]  ? skb_clone+0x190/0x3f0
[  264.714879][ T8096]  skb_clone+0x190/0x3f0
[  264.714899][ T8096]  netlink_deliver_tap+0xabd/0xd30
[  264.714924][ T8096]  netlink_unicast+0x6b2/0x7f0
[  264.714948][ T8096]  ? __pfx_netlink_unicast+0x10/0x10
[  264.714977][ T8096]  netlink_ack+0x696/0xb80
[  264.715004][ T8096]  netlink_rcv_skb+0x347/0x440
[  264.715025][ T8096]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  264.715045][ T8096]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  264.715079][ T8096]  ? netlink_deliver_tap+0x1ae/0xd30
[  264.715102][ T8096]  netlink_unicast+0x53a/0x7f0
[  264.715123][ T8096]  ? __pfx_netlink_unicast+0x10/0x10
[  264.715148][ T8096]  netlink_sendmsg+0x8d1/0xdd0
[  264.715170][ T8096]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.715198][ T8096]  ____sys_sendmsg+0xa95/0xc70
[  264.715221][ T8096]  ? copy_msghdr_from_user+0x10a/0x160
[  264.715237][ T8096]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.715268][ T8096]  ___sys_sendmsg+0x134/0x1d0
[  264.715285][ T8096]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.715332][ T8096]  __sys_sendmsg+0x16d/0x220
[  264.715350][ T8096]  ? __pfx___sys_sendmsg+0x10/0x10
[  264.715383][ T8096]  do_syscall_64+0xcd/0x260
[  264.715406][ T8096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.715423][ T8096] RIP: 0033:0x7fd95678e969
[  264.715436][ T8096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.715451][ T8096] RSP: 002b:00007fd957664038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.715467][ T8096] RAX: ffffffffffffffda RBX: 00007fd9569b6160 RCX: 00007fd95678e969
[  264.715478][ T8096] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004
[  264.715489][ T8096] RBP: 00007fd957664090 R08: 0000000000000000 R09: 0000000000000000
[  264.715499][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.715508][ T8096] R13: 0000000000000001 R14: 00007fd9569b6160 R15: 00007ffc46f6d4c8
[  264.715530][ T8096]  </TASK>
[  265.001098][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.016629][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.084597][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.151360][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.218558][ T5935] logitech 0003:046D:C626.000A: hidraw0: USB HID v0.02 Device [HID 046d:c626] on usb-dummy_hcd.2-1/input0
[  265.314798][   T30] audit: type=1326 audit(1746797389.451:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  265.317751][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.380387][ T8087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8087 comm=syz.2.563
[  265.404192][   T30] audit: type=1326 audit(1746797389.451:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  265.448696][ T5935] usb 3-1: USB disconnect, device number 18
[  265.512411][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.521301][   T30] audit: type=1326 audit(1746797389.451:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  265.556611][   T30] audit: type=1326 audit(1746797389.451:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  265.596510][   T30] audit: type=1326 audit(1746797389.451:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  266.111188][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.128021][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.254610][   T30] audit: type=1326 audit(1746797389.451:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  266.283165][   T30] audit: type=1326 audit(1746797389.461:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  266.339821][ T5925] cdc_ncm 2-1:1.0: bind() failure
[  266.349093][ T5925] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  266.387931][ T5925] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  266.405205][ T5925] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  266.468391][ T5925] usb 2-1: USB disconnect, device number 20
[  267.192004][ T5935] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  267.379559][ T5935] usb 6-1: Using ep0 maxpacket: 8
[  267.389626][ T5935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  267.407688][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  267.428505][ T5935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  267.456099][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  267.469084][ T5935] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  267.483857][ T5935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  267.493020][ T5869] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  267.501093][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.515502][ T5935] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  267.547806][  T971] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  267.671628][ T5869] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  267.682710][ T5869] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  267.693605][ T5869] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  267.703069][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.707818][  T971] usb 2-1: Using ep0 maxpacket: 8
[  267.719993][ T5925] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  267.731088][  T971] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  267.733506][ T5869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  267.745056][  T971] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  267.753356][ T5869] usb 4-1: invalid MIDI out EP 0
[  267.763910][  T971] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  267.774966][  T971] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  267.798143][  T971] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  267.807386][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.917959][ T5925] usb 5-1: device descriptor read/64, error -71
[  267.926932][ T8130] netlink: 96 bytes leftover after parsing attributes in process `syz.2.575'.
[  268.143954][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.284917][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.348696][ T5869] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  268.367789][ T5925] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  268.493127][  T971] usb 2-1: usb_control_msg returned -32
[  268.545011][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.682725][ T5869] usb 4-1: USB disconnect, device number 33
[  268.714830][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.925738][  T971] usbtmc 2-1:16.0: can't read capabilities
[  268.952656][  T971] usb 2-1: USB disconnect, device number 21
[  269.047160][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  269.047176][   T30] audit: type=1400 audit(1746797393.190:922): avc:  denied  { getopt } for  pid=8136 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  269.073189][ T5925] usb 5-1: device descriptor read/64, error -71
[  269.188631][ T5925] usb usb5-port1: attempt power cycle
[  269.271956][ T8143] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  269.279813][ T8143] audit: out of memory in audit_log_start
[  269.352494][   T30] audit: type=1400 audit(1746797393.410:923): avc:  denied  { mount } for  pid=8140 comm="syz.2.579" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  269.392204][  T971] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  269.637457][   T30] audit: type=1400 audit(1746797393.410:924): avc:  denied  { read } for  pid=8140 comm="syz.2.579" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  269.662103][ T5925] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  269.675195][   T30] audit: type=1400 audit(1746797393.420:925): avc:  denied  { open } for  pid=8140 comm="syz.2.579" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  269.697986][  T971] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  269.714262][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.736387][ T5925] usb 5-1: device descriptor read/8, error -71
[  269.754080][  T971] usb 2-1: config 0 descriptor??
[  269.764218][  T971] cp210x 2-1:0.0: cp210x converter detected
[  270.124300][   T30] audit: type=1400 audit(1746797394.270:926): avc:  denied  { unmount } for  pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  270.300037][ T5869] usb 6-1: USB disconnect, device number 2
[  270.307983][  T971] usb 2-1: cp210x converter now attached to ttyUSB0
[  270.358248][ T5925] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  270.391401][ T5925] usb 5-1: device descriptor read/8, error -71
[  270.402264][ T8152] FAULT_INJECTION: forcing a failure.
[  270.402264][ T8152] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.425091][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.5.582 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  270.425120][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  270.425131][ T8152] Call Trace:
[  270.425137][ T8152]  <TASK>
[  270.425144][ T8152]  dump_stack_lvl+0x16c/0x1f0
[  270.425174][ T8152]  should_fail_ex+0x512/0x640
[  270.425201][ T8152]  _copy_from_iter+0x2a4/0x15b0
[  270.425229][ T8152]  ? __alloc_skb+0x200/0x380
[  270.425248][ T8152]  ? __pfx__copy_from_iter+0x10/0x10
[  270.425274][ T8152]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  270.425305][ T8152]  netlink_sendmsg+0x829/0xdd0
[  270.425331][ T8152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.425363][ T8152]  ____sys_sendmsg+0xa95/0xc70
[  270.425388][ T8152]  ? copy_msghdr_from_user+0x10a/0x160
[  270.425406][ T8152]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.425450][ T8152]  ___sys_sendmsg+0x134/0x1d0
[  270.425471][ T8152]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.425525][ T8152]  __sys_sendmsg+0x16d/0x220
[  270.425545][ T8152]  ? __pfx___sys_sendmsg+0x10/0x10
[  270.425572][ T8152]  ? rcu_is_watching+0x12/0xc0
[  270.425601][ T8152]  do_syscall_64+0xcd/0x260
[  270.425631][ T8152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.425651][ T8152] RIP: 0033:0x7f6c2b38e969
[  270.425666][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.425684][ T8152] RSP: 002b:00007f6c2c24e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.425701][ T8152] RAX: ffffffffffffffda RBX: 00007f6c2b5b5fa0 RCX: 00007f6c2b38e969
[  270.425714][ T8152] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003
[  270.425725][ T8152] RBP: 00007f6c2c24e090 R08: 0000000000000000 R09: 0000000000000000
[  270.425736][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.425747][ T8152] R13: 0000000000000000 R14: 00007f6c2b5b5fa0 R15: 00007ffd452e3588
[  270.425773][ T8152]  </TASK>
[  270.626206][ T5925] usb usb5-port1: unable to enumerate USB device
[  270.689313][   T24] usb 2-1: USB disconnect, device number 22
[  270.749576][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  270.752563][ T8155] qnx4: no qnx4 filesystem (no root dir).
[  270.828428][   T24] cp210x 2-1:0.0: device disconnected
[  270.861857][   T30] audit: type=1326 audit(1746797395.010:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2b38e969 code=0x7ffc0000
[  271.010401][   T30] audit: type=1326 audit(1746797395.010:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2b38e969 code=0x7ffc0000
[  271.034034][   T30] audit: type=1326 audit(1746797395.030:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6c2b38e969 code=0x7ffc0000
[  271.674181][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'.
[  271.758262][  T971] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  271.948421][  T971] usb 5-1: Using ep0 maxpacket: 8
[  271.972158][  T971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  271.992506][  T971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  272.004527][  T971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  272.018864][  T971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  272.032770][  T971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  272.042122][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.179559][ T5935] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  272.345815][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.388393][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.396533][ T5935] usb 4-1: Using ep0 maxpacket: 8
[  272.405873][ T5817] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  272.457173][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  272.562041][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  272.688897][ T5935] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  272.697370][  T971] usb 5-1: usb_control_msg returned -32
[  272.704249][  T971] usbtmc 5-1:16.0: can't read capabilities
[  272.712296][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.763896][ T5935] usb 4-1: Product: syz
[  272.781840][ T5935] usb 4-1: Manufacturer: syz
[  272.804945][ T5935] usb 4-1: SerialNumber: syz
[  272.871456][ T5868] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  272.883236][ T5935] usb 4-1: config 0 descriptor??
[  273.084123][ T5868] usb 3-1: Using ep0 maxpacket: 32
[  273.157344][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.271304][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.413520][ T5868] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  273.467322][  T971] usb 5-1: USB disconnect, device number 25
[  273.493134][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.562087][ T5868] usb 3-1: config 0 descriptor??
[  273.605089][ T8196] qnx4: no qnx4 filesystem (no root dir).
[  273.611511][ T5935] rc_core: IR keymap rc-streamzap not found
[  273.612563][ T5817] usb 2-1: config 0 has no interfaces?
[  273.627474][ T5935] Registered IR keymap rc-empty
[  273.646785][ T5817] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  273.655219][ T5935] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  273.658011][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.702136][ T5817] usb 2-1: Product: syz
[  273.706366][ T5817] usb 2-1: Manufacturer: syz
[  273.717854][ T5935] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14
[  273.720635][ T5817] usb 2-1: SerialNumber: syz
[  273.749196][ T5817] usb 2-1: config 0 descriptor??
[  273.958421][  T971] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  273.996749][ T5868] ft260 0003:0403:6030.000B: unknown main item tag 0x0
[  274.024088][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.033786][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.068702][ T5817] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  274.088465][  T971] usb 5-1: device descriptor read/64, error -71
[  274.197828][ T5868] ft260 0003:0403:6030.000B: chip code: 0000 0000
[  274.218459][ T5817] usb 6-1: Using ep0 maxpacket: 8
[  274.226107][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  274.238272][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  274.252666][ T5817] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  274.262488][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.270739][ T5817] usb 6-1: Product: syz
[  274.275602][ T5817] usb 6-1: Manufacturer: syz
[  274.280318][ T5817] usb 6-1: SerialNumber: syz
[  274.287994][ T5817] usb 6-1: config 0 descriptor??
[  274.328578][  T971] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  274.349841][ T5817] rc_core: IR keymap rc-streamzap not found
[  274.355792][ T5817] Registered IR keymap rc-empty
[  274.364532][ T5817] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1
[  274.378730][ T5817] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input15
[  274.457794][ T5868] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[  274.459111][  T971] usb 5-1: device descriptor read/64, error -71
[  274.598853][  T971] usb usb5-port1: attempt power cycle
[  274.661639][ T5868] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup
[  274.898211][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.908957][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.949895][  T971] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  274.989778][  T971] usb 5-1: device descriptor read/8, error -71
[  275.128805][ T5869] usb 4-1: USB disconnect, device number 34
[  275.170307][   T10] usb 6-1: USB disconnect, device number 3
[  275.228324][ T5817] usb 2-1: USB disconnect, device number 23
[  275.238567][  T971] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  275.295274][  T971] usb 5-1: device descriptor read/8, error -71
[  275.340044][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.394510][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.428865][  T971] usb usb5-port1: unable to enumerate USB device
[  275.682168][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  275.682190][   T30] audit: type=1400 audit(1746797399.819:949): avc:  denied  { name_bind } for  pid=8210 comm="syz.1.600" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  276.221632][ T8223] FAULT_INJECTION: forcing a failure.
[  276.221632][ T8223] name failslab, interval 1, probability 0, space 0, times 0
[  276.244022][ T8223] CPU: 0 UID: 0 PID: 8223 Comm: syz.5.603 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  276.244051][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  276.244062][ T8223] Call Trace:
[  276.244069][ T8223]  <TASK>
[  276.244076][ T8223]  dump_stack_lvl+0x16c/0x1f0
[  276.244105][ T8223]  should_fail_ex+0x512/0x640
[  276.244136][ T8223]  should_failslab+0xc2/0x120
[  276.244156][ T8223]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  276.244184][ T8223]  ? skb_clone+0x190/0x3f0
[  276.244208][ T8223]  skb_clone+0x190/0x3f0
[  276.244228][ T8223]  netlink_deliver_tap+0xabd/0xd30
[  276.244257][ T8223]  netlink_unicast+0x5df/0x7f0
[  276.244282][ T8223]  ? __pfx_netlink_unicast+0x10/0x10
[  276.244318][ T8223]  netlink_sendmsg+0x8d1/0xdd0
[  276.244345][ T8223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.244378][ T8223]  ____sys_sendmsg+0xa95/0xc70
[  276.244402][ T8223]  ? copy_msghdr_from_user+0x10a/0x160
[  276.244420][ T8223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.244457][ T8223]  ___sys_sendmsg+0x134/0x1d0
[  276.244478][ T8223]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.244533][ T8223]  __sys_sendmsg+0x16d/0x220
[  276.244552][ T8223]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.244580][ T8223]  ? rcu_is_watching+0x12/0xc0
[  276.244609][ T8223]  do_syscall_64+0xcd/0x260
[  276.244635][ T8223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.244654][ T8223] RIP: 0033:0x7f6c2b38e969
[  276.244669][ T8223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.244687][ T8223] RSP: 002b:00007f6c2c24e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.244705][ T8223] RAX: ffffffffffffffda RBX: 00007f6c2b5b5fa0 RCX: 00007f6c2b38e969
[  276.244717][ T8223] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003
[  276.244728][ T8223] RBP: 00007f6c2c24e090 R08: 0000000000000000 R09: 0000000000000000
[  276.244740][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.244751][ T8223] R13: 0000000000000000 R14: 00007f6c2b5b5fa0 R15: 00007ffd452e3588
[  276.244777][ T8223]  </TASK>
[  276.584010][   T30] audit: type=1326 audit(1746797400.729:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  276.717661][   T30] audit: type=1326 audit(1746797400.729:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  276.757137][   T30] audit: type=1326 audit(1746797400.789:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  276.780602][   T30] audit: type=1326 audit(1746797400.789:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  276.834958][   T30] audit: type=1326 audit(1746797400.789:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  276.868646][ T5868] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71
[  276.869105][  T971] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  276.896080][   T30] audit: type=1326 audit(1746797400.799:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  276.914841][ T5868] usb 3-1: USB disconnect, device number 19
[  276.920140][   T30] audit: type=1326 audit(1746797400.799:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  277.486051][   T30] audit: type=1326 audit(1746797400.799:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  277.537386][ T8232] qnx4: no qnx4 filesystem (no root dir).
[  277.565223][   T30] audit: type=1326 audit(1746797400.809:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  277.568900][   T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  277.596813][  T971] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  277.612719][  T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.630669][  T971] usb 6-1: Product: syz
[  277.641684][  T971] usb 6-1: Manufacturer: syz
[  277.652606][  T971] usb 6-1: SerialNumber: syz
[  277.883621][  T971] usb 6-1: config 0 descriptor??
[  277.904863][  T971] comedi comedi0: Wrong number of endpoints
[  277.911534][  T971] dt9812 6-1:0.0: driver 'dt9812' failed to auto-configure device.
[  277.956096][ T5868] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  278.302252][   T10] usb 4-1: Using ep0 maxpacket: 8
[  278.351995][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  278.369881][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  278.394880][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.406054][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.490119][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  278.516684][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.719081][  T971] usb 6-1: USB disconnect, device number 4
[  278.817379][ T5828] block nbd0: Receive control failed (result -107)
[  278.977875][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  278.990821][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  279.002146][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  279.017308][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  279.076657][ T5868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  279.076893][ T8248] nbd0: detected capacity change from 0 to 32
[  279.130487][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.155078][ T6113] block nbd0: Dead connection, failed to find a fallback
[  279.164307][ T6113] block nbd0: shutting down sockets
[  279.170078][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.180557][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.188590][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.198925][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.206883][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.222042][   T10] usb 4-1: usb_control_msg returned -32
[  279.228566][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.239016][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.246937][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.254344][ T5868] usb 3-1: config 0 descriptor??
[  279.260123][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.271861][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.272481][   T10] usbtmc 4-1:16.0: can't read capabilities
[  279.293084][ T8238] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  279.294756][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.331898][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.348978][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.368561][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.398416][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.411143][   T10] usb 4-1: USB disconnect, device number 35
[  279.441719][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.460958][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.504537][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.522705][ T6113] ldm_validate_partition_table(): Disk read failed.
[  279.550524][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.592282][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.601098][ T6113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  279.610404][ T6113] Buffer I/O error on dev nbd0, logical block 0, async page read
[  279.618591][ T6113] Dev nbd0: unable to read RDB block 0
[  279.626709][ T6113]  nbd0: unable to read partition table
[  279.728219][ T6113] ldm_validate_partition_table(): Disk read failed.
[  279.742658][ T6113] Dev nbd0: unable to read RDB block 0
[  279.752001][ T6113]  nbd0: unable to read partition table
[  279.810991][ T5868] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd
[  279.837912][ T5868] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  279.881784][ T5868] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  280.502776][ T8265] bridge0: port 3(netdevsim0) entered blocking state
[  280.509747][ T8265] bridge0: port 3(netdevsim0) entered disabled state
[  280.517793][ T8265] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  280.529896][ T8265] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  280.538761][ T8265] bridge0: port 3(netdevsim0) entered blocking state
[  280.545588][ T8265] bridge0: port 3(netdevsim0) entered forwarding state
[  280.717452][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  280.717471][   T30] audit: type=1326 audit(1746797404.029:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  280.872845][ T8259] ALSA: mixer_oss: invalid OSS volume '00000000000000000000'
[  280.919256][ T8270] netlink: 'syz.1.618': attribute type 1 has an invalid length.
[  280.939004][ T8270] netlink: 'syz.1.618': attribute type 2 has an invalid length.
[  280.965092][   T30] audit: type=1326 audit(1746797404.029:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  281.007992][   T30] audit: type=1326 audit(1746797404.029:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  281.289063][ T5868] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  281.491000][ T5868] usb 4-1: device descriptor read/64, error -71
[  281.820723][ T5868] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  281.927431][ T5817] usb 3-1: reset high-speed USB device number 20 using dummy_hcd
[  282.151736][   T30] audit: type=1326 audit(1746797404.629:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  282.178131][   T30] audit: type=1326 audit(1746797404.629:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac018e969 code=0x7ffc0000
[  282.202094][   T30] audit: type=1400 audit(1746797404.649:1023): avc:  denied  { ioctl } for  pid=8259 comm="syz.5.616" path="socket:[18759]" dev="sockfs" ino=18759 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  282.235388][ T5868] usb 4-1: device descriptor read/64, error -71
[  282.281144][ T8279] qnx4: no qnx4 filesystem (no root dir).
[  282.328540][   T30] audit: type=1326 audit(1746797406.419:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd95678d2d0 code=0x7ffc0000
[  282.358390][   T30] audit: type=1326 audit(1746797406.419:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd95678d2d0 code=0x7ffc0000
[  282.409617][ T5868] usb usb4-port1: attempt power cycle
[  282.498564][   T30] audit: type=1326 audit(1746797406.429:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  282.529117][   T30] audit: type=1326 audit(1746797406.429:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95678e969 code=0x7ffc0000
[  282.779038][ T5868] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  282.812297][ T5868] usb 4-1: device descriptor read/8, error -71
[  282.849337][ T5925] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  283.009199][ T5925] usb 2-1: Using ep0 maxpacket: 8
[  283.048763][  T971] usb 3-1: USB disconnect, device number 20
[  283.067608][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  283.089385][ T5868] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  283.094421][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  283.298402][ T5925] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  283.320231][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.329187][ T5925] usb 2-1: Product: syz
[  283.333445][ T5925] usb 2-1: Manufacturer: syz
[  283.338200][ T5925] usb 2-1: SerialNumber: syz
[  283.341452][ T5868] usb 4-1: device descriptor read/8, error -71
[  283.359932][ T5925] usb 2-1: config 0 descriptor??
[  283.462858][  T971] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  283.509160][ T5925] rc_core: IR keymap rc-streamzap not found
[  283.517023][ T5868] usb usb4-port1: unable to enumerate USB device
[  283.538883][ T5925] Registered IR keymap rc-empty
[  283.559422][ T5925] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  283.611879][ T5925] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17
[  283.632306][ T8297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.624'.
[  283.685380][  T971] usb 3-1: config 0 has an invalid interface number: 189 but max is 0
[  283.775928][  T971] usb 3-1: config 0 has no interface number 0
[  283.941766][  T971] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=e7.7b
[  283.951429][  T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.972462][  T971] usb 3-1: Product: syz
[  283.976902][  T971] usb 3-1: Manufacturer: syz
[  283.982568][  T971] usb 3-1: SerialNumber: syz
[  283.993304][  T971] usb 3-1: config 0 descriptor??
[  284.005495][  T971] ttusb_dec_send_command: command bulk message failed: error -22
[  284.035981][  T971] ttusb-dec 3-1:0.189: probe with driver ttusb-dec failed with error -22
[  284.245447][ T5935] usb 3-1: USB disconnect, device number 21
[  284.489223][  T971] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  284.749410][  T971] usb 6-1: Using ep0 maxpacket: 8
[  284.837627][  T971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  285.044925][  T971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  285.236515][  T971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  285.373065][  T971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  285.523564][  T971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  285.600001][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.643511][ T8318] qnx4: no qnx4 filesystem (no root dir).
[  285.967602][  T971] usb 6-1: usb_control_msg returned -32
[  285.974244][  T971] usbtmc 6-1:16.0: can't read capabilities
[  285.983814][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.996942][ T5868] usb 2-1: USB disconnect, device number 24
[  286.042521][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.405267][   T47] usb 6-1: USB disconnect, device number 5
[  286.674089][ T8332] netlink: 96 bytes leftover after parsing attributes in process `syz.1.636'.
[  287.723011][   T30] kauditd_printk_skb: 48 callbacks suppressed
[  287.723027][   T30] audit: type=1400 audit(1746797411.799:1076): avc:  denied  { block_suspend } for  pid=8335 comm="syz.4.637" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  287.809370][   T30] audit: type=1400 audit(1746797411.939:1077): avc:  denied  { append } for  pid=8344 comm="syz.5.640" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  287.814226][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.5.640'.
[  287.919233][ T5868] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  288.331011][ T5868] usb 4-1: Using ep0 maxpacket: 8
[  288.337329][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  288.353279][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  288.366925][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  288.377429][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  288.495449][   T30] audit: type=1400 audit(1746797412.509:1078): avc:  denied  { create } for  pid=8353 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  288.546101][ T8355] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  288.557161][ T8355] evm: overlay not supported
[  288.576487][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  288.587850][   T30] audit: type=1400 audit(1746797412.679:1079): avc:  denied  { setopt } for  pid=8353 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  288.644256][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.668099][   T30] audit: type=1400 audit(1746797412.699:1080): avc:  denied  { relabelto } for  pid=8353 comm="syz.1.642" name="/" dev="overlay" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  288.722557][   T30] audit: type=1400 audit(1746797412.709:1081): avc:  denied  { associate } for  pid=8353 comm="syz.1.642" name="file1" dev="tmpfs" ino=764 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  288.842047][   T30] audit: type=1400 audit(1746797412.989:1082): avc:  denied  { create } for  pid=8335 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  288.922426][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.933329][ T5868] usb 4-1: usb_control_msg returned -32
[  288.940984][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.971376][ T5868] usbtmc 4-1:16.0: can't read capabilities
[  288.975863][ T8364] qnx4: no qnx4 filesystem (no root dir).
[  288.995398][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.039769][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.082614][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  289.094051][ T8343] usbtmc 4-1:16.0: Unable to send data, error -71
[  289.150801][  T971] usb 4-1: USB disconnect, device number 40
[  289.159414][   T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  289.167336][   T30] audit: type=1400 audit(1746797413.289:1083): avc:  denied  { create } for  pid=8361 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  289.238181][   T30] audit: type=1400 audit(1746797413.379:1084): avc:  denied  { rmdir } for  pid=5815 comm="syz-executor" name="file1" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  289.264346][    C0] vkms_vblank_simulate: vblank timer overrun
[  289.381863][   T10] usb 5-1: Using ep0 maxpacket: 16
[  289.408722][   T10] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  289.421868][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  289.442939][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  289.453189][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.465015][   T10] usb 5-1: config 0 descriptor??
[  289.474881][   T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  289.496076][   T30] audit: type=1400 audit(1746797413.639:1085): avc:  denied  { setopt } for  pid=8369 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  290.281011][ T8369] delete_channel: no stack
[  290.830919][ T5925] usb 5-1: USB disconnect, device number 30
[  291.770281][ T8397] qnx4: no qnx4 filesystem (no root dir).
[  291.985046][  T971] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  292.043378][ T8409] netlink: 80 bytes leftover after parsing attributes in process `syz.4.658'.
[  292.312717][  T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.342742][  T971] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  292.365645][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.409517][ T5935] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  292.614821][  T971] usb 2-1: config 0 descriptor??
[  292.763528][ T5935] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  292.783485][  T971] pwc: Askey VC010 type 2 USB webcam detected.
[  292.799450][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.832245][ T5935] usb 5-1: Product: syz
[  292.859136][ T5935] usb 5-1: Manufacturer: syz
[  292.864223][ T5935] usb 5-1: SerialNumber: syz
[  292.886269][ T5935] usb 5-1: config 0 descriptor??
[  292.949858][ T5935] gspca_main: sq905c-2.14.0 probing 2770:9052
[  293.211512][  T971] pwc: recv_control_msg error -32 req 02 val 2b00
[  293.216901][ T5935] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  293.228356][ T5935] sq905c 5-1:0.0: Get version command failed
[  293.251252][ T5935] sq905c 5-1:0.0: probe with driver sq905c failed with error -71
[  293.259495][  T971] pwc: recv_control_msg error -32 req 02 val 2700
[  293.731451][ T5935] usb 5-1: USB disconnect, device number 31
[  293.820959][ T8426] netlink: 96 bytes leftover after parsing attributes in process `syz.3.662'.
[  293.857839][  T971] pwc: recv_control_msg error -32 req 02 val 2c00
[  294.177416][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.209149][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.251877][  T971] pwc: recv_control_msg error -71 req 04 val 1300
[  294.289152][  T971] pwc: recv_control_msg error -71 req 04 val 1400
[  294.307503][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  294.307518][   T30] audit: type=1400 audit(1746797418.449:1107): avc:  denied  { append } for  pid=8433 comm="syz.3.665" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  294.309829][  T971] pwc: recv_control_msg error -71 req 02 val 2000
[  294.354829][  T971] pwc: recv_control_msg error -71 req 02 val 2100
[  294.364369][  T971] pwc: recv_control_msg error -71 req 04 val 1500
[  294.374615][  T971] pwc: recv_control_msg error -71 req 02 val 2500
[  294.381690][  T971] pwc: recv_control_msg error -71 req 02 val 2400
[  294.388492][  T971] pwc: recv_control_msg error -71 req 02 val 2600
[  294.398918][  T971] pwc: recv_control_msg error -71 req 02 val 2900
[  294.408087][  T971] pwc: recv_control_msg error -71 req 02 val 2800
[  294.420451][  T971] pwc: recv_control_msg error -71 req 04 val 1100
[  294.428666][  T971] pwc: recv_control_msg error -71 req 04 val 1200
[  294.454541][  T971] pwc: Registered as video103.
[  294.475455][ T5817] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  294.638473][  T971] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18
[  294.678064][ T5817] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  294.812551][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.873672][  T971] usb 2-1: USB disconnect, device number 25
[  294.882175][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  294.915989][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.939282][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.955324][ T5817] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  295.003446][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  295.024621][ T5817] usb 6-1: Product: syz
[  295.029026][ T5817] usb 6-1: Manufacturer: syz
[  295.050996][ T8445] warning: `syz.3.668' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  295.077195][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[  295.088780][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[  295.097927][ T5817] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  295.104587][ T5817] cdc_wdm 6-1:1.0: Unknown control protocol
[  295.193143][ T8447] qnx4: no qnx4 filesystem (no root dir).
[  295.349966][  T971] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  295.353526][   T30] audit: type=1400 audit(1746797419.499:1108): avc:  denied  { read write } for  pid=8429 comm="syz.5.663" name="cdc-wdm0" dev="devtmpfs" ino=3107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  295.417943][ T8430] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[  295.421395][   T30] audit: type=1400 audit(1746797419.559:1109): avc:  denied  { open } for  pid=8429 comm="syz.5.663" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  295.569954][  T971] usb 2-1: Using ep0 maxpacket: 8
[  295.583779][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.615900][ T5817] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  295.632550][  T971] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  295.696915][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.715973][  T971] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  295.757369][  T971] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  295.770708][ T8455] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[  295.783602][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.796477][   T30] audit: type=1400 audit(1746797419.938:1110): avc:  denied  { ioctl } for  pid=8449 comm="syz.2.670" path="socket:[19035]" dev="sockfs" ino=19035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  295.821250][  T971] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.838519][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.849991][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'.
[  295.999562][  T971] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  296.016274][ T5817] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  296.029510][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.037979][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.059531][ T5817] usb 4-1: Product: syz
[  296.063738][ T5817] usb 4-1: Manufacturer: syz
[  296.068622][ T5868] usb 6-1: USB disconnect, device number 6
[  296.073396][ T5817] usb 4-1: SerialNumber: syz
[  296.119975][ T5817] usb 4-1: config 0 descriptor??
[  296.133926][ T5817] gspca_main: sq905c-2.14.0 probing 2770:9052
[  296.231153][ T5935] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  296.378889][  T971] usb 2-1: usb_control_msg returned -32
[  296.380061][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.393177][   T30] audit: type=1400 audit(1746797420.528:1111): avc:  denied  { read } for  pid=8451 comm="syz.3.671" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  296.398111][  T971] usbtmc 2-1:16.0: can't read capabilities
[  296.417253][   T30] audit: type=1400 audit(1746797420.528:1112): avc:  denied  { open } for  pid=8451 comm="syz.3.671" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  296.431814][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.009524][ T5817] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  297.017036][ T5817] sq905c 4-1:0.0: Get version command failed
[  297.187517][ T5935] usb 5-1: Using ep0 maxpacket: 32
[  297.187549][ T5817] sq905c 4-1:0.0: probe with driver sq905c failed with error -110
[  297.220052][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  297.243226][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.252793][ T8442] usbtmc 2-1:16.0: Unable to send data, error -71
[  297.266305][   T10] usb 4-1: USB disconnect, device number 41
[  297.280050][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.292826][ T5935] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  297.319252][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.352689][ T5935] usb 5-1: config 0 descriptor??
[  297.375161][ T8468] netlink: 96 bytes leftover after parsing attributes in process `syz.5.675'.
[  297.387687][ T5935] hub 5-1:0.0: USB hub found
[  297.396402][ T5868] usb 2-1: USB disconnect, device number 26
[  297.564251][ T8470] FAULT_INJECTION: forcing a failure.
[  297.564251][ T8470] name failslab, interval 1, probability 0, space 0, times 0
[  297.577825][ T8470] CPU: 0 UID: 0 PID: 8470 Comm: syz.2.674 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  297.577852][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  297.577863][ T8470] Call Trace:
[  297.577870][ T8470]  <TASK>
[  297.577877][ T8470]  dump_stack_lvl+0x16c/0x1f0
[  297.577908][ T8470]  should_fail_ex+0x512/0x640
[  297.577933][ T8470]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  297.577968][ T8470]  should_failslab+0xc2/0x120
[  297.577987][ T8470]  __kmalloc_cache_noprof+0x6a/0x3e0
[  297.578011][ T8470]  ? lockdep_hardirqs_on+0x7c/0x110
[  297.578034][ T8470]  ? alloc_fs_context+0x57/0x9c0
[  297.578057][ T8470]  alloc_fs_context+0x57/0x9c0
[  297.578080][ T8470]  __x64_sys_fsopen+0xeb/0x240
[  297.578102][ T8470]  do_syscall_64+0xcd/0x260
[  297.578128][ T8470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.578147][ T8470] RIP: 0033:0x7fc30018e969
[  297.578162][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.578180][ T8470] RSP: 002b:00007fc301072038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  297.578198][ T8470] RAX: ffffffffffffffda RBX: 00007fc3003b6160 RCX: 00007fc30018e969
[  297.578210][ T8470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  297.578222][ T8470] RBP: 00007fc301072090 R08: 0000000000000000 R09: 0000000000000000
[  297.578233][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.578244][ T8470] R13: 0000000000000000 R14: 00007fc3003b6160 R15: 00007ffcfec73b28
[  297.578271][ T8470]  </TASK>
[  297.750308][ T5935] hub 5-1:0.0: 1 port detected
[  298.277753][ T8480] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.676'.
[  298.291994][ T8477] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.676'.
[  298.459949][ T5935] hub 5-1:0.0: activate --> -90
[  299.783247][ T5935] hub 5-1:0.0: hub_ext_port_status failed (err = -32)
[  300.162099][ T8491] ieee802154 phy0 wpan0: encryption failed: -22
[  300.168505][   T30] audit: type=1400 audit(1746797424.308:1113): avc:  denied  { write } for  pid=8484 comm="syz.5.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  300.319518][ T8500] qnx4: no qnx4 filesystem (no root dir).
[  300.328523][   T30] audit: type=1326 audit(1746797424.418:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  300.646946][   T30] audit: type=1326 audit(1746797424.418:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  300.785967][   T30] audit: type=1326 audit(1746797424.438:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  300.992145][   T30] audit: type=1326 audit(1746797424.438:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  301.027029][ T5935] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  301.084594][   T30] audit: type=1326 audit(1746797424.438:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  301.107949][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.129794][ T5869] usb 5-1: USB disconnect, device number 32
[  301.211912][ T5935] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  301.236105][ T5935] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  301.239561][   T30] audit: type=1326 audit(1746797424.498:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  301.256088][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.427205][   T30] audit: type=1326 audit(1746797424.498:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  301.436710][ T5935] usb 2-1: Product: syz
[  301.451109][   T30] audit: type=1326 audit(1746797424.498:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  301.478230][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.966907][   T30] audit: type=1326 audit(1746797424.498:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  301.996969][ T5935] usb 2-1: Manufacturer: syz
[  302.003597][ T5935] usb 2-1: SerialNumber: syz
[  302.017817][ T5935] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  302.913464][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'.
[  302.999656][  T971] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  303.037815][ T8528] ieee802154 phy0 wpan0: encryption failed: -22
[  303.154879][  T971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.166226][  T971] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  303.178524][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.197042][  T971] usb 6-1: config 0 descriptor??
[  303.508550][ T5935] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  303.625484][ T5869] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[  303.766167][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.877178][ T8538] vivid-000: disconnect
[  303.911794][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.932396][ T5935] usb 2-1: USB disconnect, device number 27
[  303.965156][  T971] itetech 0003:258A:6A88.000D: unknown main item tag 0x0
[  303.991330][ T5869] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  303.992751][  T971] itetech 0003:258A:6A88.000D: unknown main item tag 0x0
[  304.002566][ T5869] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  304.006880][  T971] itetech 0003:258A:6A88.000D: unknown main item tag 0x0
[  304.044700][ T8529] vivid-000: reconnect
[  304.049931][ T5869] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  304.059039][ T5869] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  304.062572][  T971] itetech 0003:258A:6A88.000D: unknown main item tag 0x0
[  304.079858][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  304.097086][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  304.107129][  T971] itetech 0003:258A:6A88.000D: unknown main item tag 0x0
[  304.117692][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  304.139209][  T971] itetech 0003:258A:6A88.000D: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.5-1/input0
[  304.142862][ T5869] usb 4-1: string descriptor 0 read error: -22
[  304.161845][ T5869] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  304.175773][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.203386][ T5869] usb 4-1: config 0 descriptor??
[  304.218833][  T971] usb 6-1: USB disconnect, device number 7
[  304.251136][ T5869] hub 4-1:0.0: bad descriptor, ignoring hub
[  304.257081][ T5869] hub 4-1:0.0: probe with driver hub failed with error -5
[  304.306817][ T5869] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20
[  304.334037][ T8549] fido_id[8549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  305.084013][ T8564] netlink: 'syz.1.701': attribute type 58 has an invalid length.
[  305.111544][ T8518] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  305.155874][   T47] usb 4-1: USB disconnect, device number 42
[  305.162817][ T6043] Bluetooth: hci5: Frame reassembly failed (-84)
[  305.192431][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.701'.
[  305.297901][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  305.297917][   T30] audit: type=1400 audit(1746797429.438:1138): avc:  denied  { ioctl } for  pid=8568 comm="syz.4.702" path="socket:[19225]" dev="sockfs" ino=19225 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  305.518459][ T8579] FAULT_INJECTION: forcing a failure.
[  305.518459][ T8579] name failslab, interval 1, probability 0, space 0, times 0
[  305.533349][ T8579] CPU: 1 UID: 0 PID: 8579 Comm: syz.1.707 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  305.533375][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  305.533394][ T8579] Call Trace:
[  305.533400][ T8579]  <TASK>
[  305.533407][ T8579]  dump_stack_lvl+0x16c/0x1f0
[  305.533436][ T8579]  should_fail_ex+0x512/0x640
[  305.533458][ T8579]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  305.533486][ T8579]  should_failslab+0xc2/0x120
[  305.533505][ T8579]  __kmalloc_cache_noprof+0x6a/0x3e0
[  305.533528][ T8579]  ? __genradix_ptr_alloc+0x340/0x5f0
[  305.533552][ T8579]  ? sctp_auth_shkey_create+0x9e/0x210
[  305.533582][ T8579]  sctp_auth_shkey_create+0x9e/0x210
[  305.533609][ T8579]  sctp_auth_asoc_copy_shkeys+0x1f2/0x360
[  305.533640][ T8579]  sctp_association_new+0x19ad/0x2a00
[  305.533669][ T8579]  sctp_connect_new_asoc+0x1b6/0x790
[  305.533691][ T8579]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  305.533717][ T8579]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  305.533744][ T8579]  sctp_sendmsg+0x15f9/0x1ee0
[  305.533771][ T8579]  ? __pfx_sctp_sendmsg+0x10/0x10
[  305.533796][ T8579]  ? __pfx_sock_has_perm+0x10/0x10
[  305.533831][ T8579]  ? __pfx_sctp_sendmsg+0x10/0x10
[  305.533854][ T8579]  inet_sendmsg+0x119/0x140
[  305.533879][ T8579]  ____sys_sendmsg+0x973/0xc70
[  305.533906][ T8579]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.533942][ T8579]  ___sys_sendmsg+0x134/0x1d0
[  305.533966][ T8579]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.534020][ T8579]  __sys_sendmsg+0x16d/0x220
[  305.534039][ T8579]  ? __pfx___sys_sendmsg+0x10/0x10
[  305.534079][ T8579]  do_syscall_64+0xcd/0x260
[  305.534105][ T8579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.534123][ T8579] RIP: 0033:0x7fcac018e969
[  305.534139][ T8579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.534169][ T8579] RSP: 002b:00007fcac1092038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.534186][ T8579] RAX: ffffffffffffffda RBX: 00007fcac03b5fa0 RCX: 00007fcac018e969
[  305.534199][ T8579] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[  305.534210][ T8579] RBP: 00007fcac1092090 R08: 0000000000000000 R09: 0000000000000000
[  305.534220][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.534231][ T8579] R13: 0000000000000000 R14: 00007fcac03b5fa0 R15: 00007ffe32236e18
[  305.534260][ T8579]  </TASK>
[  305.816626][   T30] audit: type=1400 audit(1746797429.958:1139): avc:  denied  { view } for  pid=8580 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  305.817620][ T8582] ptm ptm2: ldisc open failed (-12), clearing slot 2
[  305.837921][   T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  305.899414][   T30] audit: type=1400 audit(1746797430.038:1140): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  306.013759][   T24] usb 5-1: Using ep0 maxpacket: 8
[  306.021505][   T24] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  306.030160][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.045730][   T24] usb 5-1: config 0 has no interface number 0
[  306.051941][   T24] usb 5-1: config 0 interface 31 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  306.067976][   T24] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  306.099645][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.107675][   T24] usb 5-1: Product: syz
[  306.112170][   T24] usb 5-1: Manufacturer: syz
[  306.117097][   T24] usb 5-1: SerialNumber: syz
[  306.130474][   T24] usb 5-1: config 0 descriptor??
[  306.163717][   T24] redrat3 5-1:0.31: Couldn't find all endpoints
[  306.399853][ T5869] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  306.487446][ T8573] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  306.551940][   T24] usb 5-1: USB disconnect, device number 33
[  306.689923][ T5869] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  306.701143][ T5869] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  306.711036][ T5869] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  306.720374][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.742625][ T8587] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  306.756025][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  306.806786][ T8594] vivid-000: disconnect
[  306.940441][ T8588] vivid-000: reconnect
[  306.979192][ T5869] usb 2-1: USB disconnect, device number 28
[  307.600297][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  307.725734][ T8610] dlm: no local IP address has been set
[  307.732289][ T8610] dlm: cannot start dlm midcomms -107
[  308.155855][ T8615] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  308.210450][ T8616] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  308.220397][   T30] audit: type=1400 audit(1746797432.348:1141): avc:  denied  { getopt } for  pid=8619 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  308.316938][ T8615] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.484477][   T30] audit: type=1400 audit(1746797432.628:1142): avc:  denied  { read } for  pid=5170 comm="acpid" name="event8" dev="devtmpfs" ino=3152 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  308.540975][   T30] audit: type=1400 audit(1746797432.628:1143): avc:  denied  { open } for  pid=5170 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3152 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  308.613268][   T30] audit: type=1400 audit(1746797432.628:1144): avc:  denied  { ioctl } for  pid=5170 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3152 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  308.680331][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'.
[  308.710165][ T5817] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  308.889878][ T5817] usb 4-1: Using ep0 maxpacket: 32
[  308.902121][ T8615] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.938988][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0
[  308.959941][ T5817] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  308.996530][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.044470][ T8651] FAULT_INJECTION: forcing a failure.
[  309.044470][ T8651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.057812][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.5.723 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  309.057839][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  309.057850][ T8651] Call Trace:
[  309.057857][ T8651]  <TASK>
[  309.057864][ T8651]  dump_stack_lvl+0x16c/0x1f0
[  309.057893][ T8651]  should_fail_ex+0x512/0x640
[  309.057921][ T8651]  _copy_from_user+0x2e/0xd0
[  309.057956][ T8651]  __sys_bpf+0x21d/0x4d80
[  309.057978][ T8651]  ? rcu_is_watching+0x12/0xc0
[  309.057999][ T8651]  ? trace_sched_exit_tp+0xd0/0x130
[  309.058025][ T8651]  ? __pfx___sys_bpf+0x10/0x10
[  309.058044][ T8651]  ? __schedule+0x1186/0x5de0
[  309.058067][ T8651]  ? ksys_write+0x190/0x240
[  309.058115][ T8651]  ? fput+0x70/0xf0
[  309.058134][ T8651]  ? ksys_write+0x1b9/0x240
[  309.058171][ T8651]  __x64_sys_bpf+0x78/0xc0
[  309.058192][ T8651]  ? lockdep_hardirqs_on+0x7c/0x110
[  309.058215][ T8651]  do_syscall_64+0xcd/0x260
[  309.058240][ T8651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.058259][ T8651] RIP: 0033:0x7f6c2b38e969
[  309.058275][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.058293][ T8651] RSP: 002b:00007f6c2c20c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  309.058311][ T8651] RAX: ffffffffffffffda RBX: 00007f6c2b5b6160 RCX: 00007f6c2b38e969
[  309.058324][ T8651] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  309.058335][ T8651] RBP: 00007f6c2c20c090 R08: 0000000000000000 R09: 0000000000000000
[  309.058347][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.058358][ T8651] R13: 0000000000000000 R14: 00007f6c2b5b6160 R15: 00007ffd452e3588
[  309.058384][ T8651]  </TASK>
[  309.255369][ T8650] netlink: 96 bytes leftover after parsing attributes in process `syz.1.724'.
[  310.067578][ T5817] usb 4-1: config 0 descriptor??
[  310.130154][ T8615] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.324786][ T8666] orangefs_mount: mount request failed with -4
[  311.340817][ T8615] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.365827][   T30] audit: type=1400 audit(1746797435.468:1145): avc:  denied  { ioctl } for  pid=8624 comm="syz.3.720" path="socket:[19325]" dev="sockfs" ino=19325 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  311.489093][ T5817] sony 0003:054C:0268.000E: hiddev0,hidraw0: USB HID v81.01 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0
[  311.507713][ T8671] netlink: 'syz.4.729': attribute type 21 has an invalid length.
[  311.519729][   T30] audit: type=1400 audit(1746797435.508:1146): avc:  denied  { bind } for  pid=8624 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  311.528726][ T8671] netlink: 128 bytes leftover after parsing attributes in process `syz.4.729'.
[  311.540061][ T5817] sony 0003:054C:0268.000E: failed to claim input
[  311.569668][ T5869] usb 4-1: USB disconnect, device number 43
[  311.597189][ T8671] netlink: 3 bytes leftover after parsing attributes in process `syz.4.729'.
[  311.699796][   T30] audit: type=1400 audit(1746797435.508:1147): avc:  denied  { name_bind } for  pid=8624 comm="syz.3.720" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  311.764462][ T8674] fido_id[8674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  311.778801][   T30] audit: type=1400 audit(1746797435.508:1148): avc:  denied  { node_bind } for  pid=8624 comm="syz.3.720" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  311.864216][ T8615] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.888018][ T8615] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.913707][ T8615] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.951377][ T8615] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.059144][ T8687] FAULT_INJECTION: forcing a failure.
[  312.059144][ T8687] name failslab, interval 1, probability 0, space 0, times 0
[  312.075625][ T8687] CPU: 0 UID: 0 PID: 8687 Comm: syz.2.735 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  312.075651][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  312.075663][ T8687] Call Trace:
[  312.075669][ T8687]  <TASK>
[  312.075677][ T8687]  dump_stack_lvl+0x16c/0x1f0
[  312.075706][ T8687]  should_fail_ex+0x512/0x640
[  312.075729][ T8687]  ? fs_reclaim_acquire+0xae/0x150
[  312.075760][ T8687]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  312.075785][ T8687]  should_failslab+0xc2/0x120
[  312.075805][ T8687]  __kmalloc_noprof+0xd2/0x510
[  312.075839][ T8687]  tomoyo_realpath_from_path+0xc2/0x6e0
[  312.075867][ T8687]  ? tomoyo_profile+0x47/0x60
[  312.075887][ T8687]  tomoyo_path_number_perm+0x245/0x580
[  312.075908][ T8687]  ? tomoyo_path_number_perm+0x237/0x580
[  312.075933][ T8687]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  312.075956][ T8687]  ? find_held_lock+0x2b/0x80
[  312.076003][ T8687]  ? find_held_lock+0x2b/0x80
[  312.076022][ T8687]  ? hook_file_ioctl_common+0x145/0x410
[  312.076047][ T8687]  ? __fget_files+0x20e/0x3c0
[  312.076078][ T8687]  security_file_ioctl+0x9b/0x240
[  312.076105][ T8687]  __x64_sys_ioctl+0xb7/0x200
[  312.076130][ T8687]  do_syscall_64+0xcd/0x260
[  312.076156][ T8687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.076174][ T8687] RIP: 0033:0x7fc30018e969
[  312.076191][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.076208][ T8687] RSP: 002b:00007fc3010b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  312.076226][ T8687] RAX: ffffffffffffffda RBX: 00007fc3003b5fa0 RCX: 00007fc30018e969
[  312.076239][ T8687] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003
[  312.076251][ T8687] RBP: 00007fc3010b4090 R08: 0000000000000000 R09: 0000000000000000
[  312.076261][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.076272][ T8687] R13: 0000000000000000 R14: 00007fc3003b5fa0 R15: 00007ffcfec73b28
[  312.076298][ T8687]  </TASK>
[  312.076306][ T8687] ERROR: Out of memory at tomoyo_realpath_from_path.
[  312.197493][   T30] audit: type=1400 audit(1746797436.198:1149): avc:  denied  { bind } for  pid=8684 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  312.523361][ T8693] erofs (device nullb0): cannot find valid erofs superblock
[  312.819018][   T30] audit: type=1326 audit(1746797436.958:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  313.980221][   T30] audit: type=1326 audit(1746797436.958:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  314.508695][ T8713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  314.521098][ T8713] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  314.859342][   T30] audit: type=1326 audit(1746797436.958:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  314.882927][   T30] audit: type=1326 audit(1746797436.958:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  314.906333][   T30] audit: type=1326 audit(1746797436.958:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5698f8e969 code=0x7ffc0000
[  315.844520][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'.
[  315.855031][ T8742] netlink: 'syz.4.750': attribute type 23 has an invalid length.
[  315.967144][ T8742] netlink: 'syz.4.750': attribute type 15 has an invalid length.
[  316.077987][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'.
[  316.921013][   T47] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  317.062598][ T8754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  317.069878][ T8754] IPv6: NLM_F_CREATE should be set when creating new route
[  317.160381][   T47] usb 4-1: Using ep0 maxpacket: 8
[  317.552838][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  317.559168][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  317.563125][   T47] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  318.131666][   T47] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  318.199318][   T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  318.201507][ T8763] FAULT_INJECTION: forcing a failure.
[  318.201507][ T8763] name failslab, interval 1, probability 0, space 0, times 0
[  318.239763][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.271012][   T47] usbtmc 4-1:16.0: bulk endpoints not found
[  318.329947][ T8763] CPU: 0 UID: 0 PID: 8763 Comm: syz.1.759 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  318.329966][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  318.329972][ T8763] Call Trace:
[  318.329976][ T8763]  <TASK>
[  318.329981][ T8763]  dump_stack_lvl+0x16c/0x1f0
[  318.330000][ T8763]  should_fail_ex+0x512/0x640
[  318.330018][ T8763]  should_failslab+0xc2/0x120
[  318.330030][ T8763]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  318.330049][ T8763]  ? skb_clone+0x190/0x3f0
[  318.330064][ T8763]  skb_clone+0x190/0x3f0
[  318.330076][ T8763]  netlink_deliver_tap+0xabd/0xd30
[  318.330092][ T8763]  netlink_dump+0xb6d/0xd00
[  318.330106][ T8763]  ? __pfx_netlink_dump+0x10/0x10
[  318.330126][ T8763]  ? rcu_is_watching+0x12/0xc0
[  318.330139][ T8763]  ? trace_contention_end+0xdd/0x130
[  318.330159][ T8763]  __netlink_dump_start+0x6d6/0x990
[  318.330173][ T8763]  ip_set_dump+0x17f/0x210
[  318.330189][ T8763]  ? __pfx_ip_set_dump+0x10/0x10
[  318.330202][ T8763]  ? __pfx_ip_set_dump_start+0x10/0x10
[  318.330216][ T8763]  ? __pfx_ip_set_dump_do+0x10/0x10
[  318.330230][ T8763]  ? __pfx_ip_set_dump_done+0x10/0x10
[  318.330250][ T8763]  nfnetlink_rcv_msg+0x9f9/0x1200
[  318.330270][ T8763]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  318.330283][ T8763]  ? kmem_cache_free+0x2d4/0x4d0
[  318.330315][ T8763]  ? avc_has_perm_noaudit+0x117/0x3b0
[  318.330331][ T8763]  netlink_rcv_skb+0x16a/0x440
[  318.330343][ T8763]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  318.330358][ T8763]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  318.330380][ T8763]  ? bpf_lsm_capable+0x9/0x10
[  318.330389][ T8763]  ? security_capable+0x7e/0x260
[  318.330402][ T8763]  ? ns_capable+0xd7/0x110
[  318.330416][ T8763]  nfnetlink_rcv+0x1b3/0x430
[  318.330430][ T8763]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  318.330443][ T8763]  ? netlink_deliver_tap+0x1ae/0xd30
[  318.330457][ T8763]  netlink_unicast+0x53a/0x7f0
[  318.330472][ T8763]  ? __pfx_netlink_unicast+0x10/0x10
[  318.330497][ T8763]  netlink_sendmsg+0x8d1/0xdd0
[  318.330522][ T8763]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.330552][ T8763]  ____sys_sendmsg+0xa95/0xc70
[  318.330583][ T8763]  ? copy_msghdr_from_user+0x10a/0x160
[  318.330600][ T8763]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.330640][ T8763]  ___sys_sendmsg+0x134/0x1d0
[  318.330660][ T8763]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.330717][ T8763]  __sys_sendmsg+0x16d/0x220
[  318.330737][ T8763]  ? __pfx___sys_sendmsg+0x10/0x10
[  318.330765][ T8763]  ? rcu_is_watching+0x12/0xc0
[  318.330794][ T8763]  do_syscall_64+0xcd/0x260
[  318.330821][ T8763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.330840][ T8763] RIP: 0033:0x7fcac018e969
[  318.330857][ T8763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.330875][ T8763] RSP: 002b:00007fcac1092038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.330894][ T8763] RAX: ffffffffffffffda RBX: 00007fcac03b5fa0 RCX: 00007fcac018e969
[  318.330909][ T8763] RDX: 0000000020048004 RSI: 0000200000000200 RDI: 0000000000000006
[  318.330921][ T8763] RBP: 00007fcac1092090 R08: 0000000000000000 R09: 0000000000000000
[  318.330932][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.330943][ T8763] R13: 0000000000000000 R14: 00007fcac03b5fa0 R15: 00007ffe32236e18
[  318.330970][ T8763]  </TASK>
[  319.022743][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  319.022783][   T30] audit: type=1400 audit(1746797443.168:1177): avc:  denied  { connect } for  pid=8768 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  319.247453][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.261415][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.296371][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.325614][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.680202][   T47] usb 4-1: USB disconnect, device number 44
[  323.402266][ T5869] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  323.602534][ T5869] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  323.614067][ T5869] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.310140][ T5869] usb 4-1: config 0 interface 0 has no altsetting 0
[  324.380906][ T5869] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  324.574297][ T8813] FAULT_INJECTION: forcing a failure.
[  324.574297][ T8813] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.589558][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.4.772 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  324.589582][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  324.589592][ T8813] Call Trace:
[  324.589598][ T8813]  <TASK>
[  324.589604][ T8813]  dump_stack_lvl+0x16c/0x1f0
[  324.589630][ T8813]  should_fail_ex+0x512/0x640
[  324.589652][ T8813]  _copy_from_user+0x2e/0xd0
[  324.589676][ T8813]  memdup_user_nul+0x6c/0x120
[  324.589697][ T8813]  sel_commit_bools_write+0x13e/0x420
[  324.589716][ T8813]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  324.589743][ T8813]  vfs_write+0x25c/0x1180
[  324.589766][ T8813]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  324.589790][ T8813]  ? __pfx___mutex_lock+0x10/0x10
[  324.589811][ T8813]  ? __pfx_vfs_write+0x10/0x10
[  324.589840][ T8813]  ? __fget_files+0x20e/0x3c0
[  324.589864][ T8813]  ? sysvec_kvm_asyncpf_interrupt+0x60/0xc0
[  324.589895][ T8813]  ksys_write+0x12a/0x240
[  324.589911][ T8813]  ? __pfx_ksys_write+0x10/0x10
[  324.589931][ T8813]  do_syscall_64+0xcd/0x260
[  324.589946][ T8813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.589957][ T8813] RIP: 0033:0x7fd95678e969
[  324.589967][ T8813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.589987][ T8813] RSP: 002b:00007fd957685038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  324.589998][ T8813] RAX: ffffffffffffffda RBX: 00007fd9569b6080 RCX: 00007fd95678e969
[  324.590005][ T8813] RDX: 0000000000000003 RSI: 0000200000000800 RDI: 0000000000000004
[  324.590011][ T8813] RBP: 00007fd957685090 R08: 0000000000000000 R09: 0000000000000000
[  324.590018][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.590024][ T8813] R13: 0000000000000000 R14: 00007fd9569b6080 R15: 00007ffc46f6d4c8
[  324.590038][ T8813]  </TASK>
[  324.893528][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.903536][ T5869] usb 4-1: config 0 descriptor??
[  324.920361][ T8815] !
: renamed from dummy0 (while UP)
[  326.436762][   T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  327.559723][ T5935] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  327.911866][ T5868] IPVS: starting estimator thread 0...
[  328.011724][   T10] usb 2-1: Using ep0 maxpacket: 8
[  328.093965][ T5869] usbhid 4-1:0.0: can't add hid device: -71
[  328.094646][ T8834] IPVS: using max 42 ests per chain, 100800 per kthread
[  328.100019][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  328.427227][ T5869] usb 4-1: USB disconnect, device number 45
[  328.491276][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[  328.498910][   T10] usb 2-1: can't read configurations, error -71
[  328.521960][ T5935] usb 3-1: Using ep0 maxpacket: 8
[  328.583977][ T5935] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  328.664070][ T5935] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  328.822833][ T5935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  328.925261][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.320018][ T8846] FAULT_INJECTION: forcing a failure.
[  329.320018][ T8846] name failslab, interval 1, probability 0, space 0, times 0
[  329.332839][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.1.782 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  329.332865][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  329.332876][ T8846] Call Trace:
[  329.332883][ T8846]  <TASK>
[  329.332890][ T8846]  dump_stack_lvl+0x16c/0x1f0
[  329.332918][ T8846]  should_fail_ex+0x512/0x640
[  329.332941][ T8846]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  329.332972][ T8846]  should_failslab+0xc2/0x120
[  329.332991][ T8846]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  329.333019][ T8846]  ? key_alloc+0x3e0/0x1390
[  329.333047][ T8846]  key_alloc+0x3e0/0x1390
[  329.333078][ T8846]  ? rcu_is_watching+0x12/0xc0
[  329.333098][ T8846]  ? irqentry_exit+0x3b/0x90
[  329.333121][ T8846]  ? __pfx_key_alloc+0x10/0x10
[  329.333153][ T8846]  keyring_alloc+0x44/0xc0
[  329.333182][ T8846]  lookup_user_key+0xa3f/0x1300
[  329.333211][ T8846]  ? __pfx_lookup_user_key+0x10/0x10
[  329.333234][ T8846]  ? rcu_is_watching+0x12/0xc0
[  329.333254][ T8846]  ? irqentry_exit+0x3b/0x90
[  329.333274][ T8846]  ? lockdep_hardirqs_on+0x7c/0x110
[  329.333299][ T8846]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  329.333330][ T8846]  ? rep_movs_alternative+0x4a/0x90
[  329.333353][ T8846]  __do_sys_add_key+0x256/0x470
[  329.333373][ T8846]  ? __pfx___do_sys_add_key+0x10/0x10
[  329.333390][ T8846]  ? ksys_write+0x1b9/0x240
[  329.333425][ T8846]  do_syscall_64+0xcd/0x260
[  329.333450][ T8846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.333469][ T8846] RIP: 0033:0x7fcac018e969
[  329.333484][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.333501][ T8846] RSP: 002b:00007fcac1050038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  329.333519][ T8846] RAX: ffffffffffffffda RBX: 00007fcac03b6160 RCX: 00007fcac018e969
[  329.333531][ T8846] RDX: 0000200000001940 RSI: 0000200000001900 RDI: 00002000000018c0
[  329.333543][ T8846] RBP: 00007fcac1050090 R08: fffffffffffffffe R09: 0000000000000000
[  329.333555][ T8846] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001
[  329.333566][ T8846] R13: 0000000000000000 R14: 00007fcac03b6160 R15: 00007ffe32236e18
[  329.333592][ T8846]  </TASK>
[  329.756959][ T5935] usbtmc 3-1:16.0: bulk endpoints not found
[  329.889882][ T5935] usb 3-1: USB disconnect, device number 22
[  330.128681][ T8852] overlayfs: failed to resolve './file0': -2
[  331.026771][ T8859] overlayfs: failed to resolve './file1': -2
[  331.969807][ T8858] binder: 8851:8858 ioctl 4018620d 0 returned -22
[  333.899979][  T971] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  334.008560][ T5935] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  334.050474][  T971] usb 5-1: Using ep0 maxpacket: 8
[  334.057757][  T971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  334.154237][  T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  334.168817][  T971] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  334.182704][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.191921][  T971] usb 5-1: Product: syz
[  334.196272][  T971] usb 5-1: Manufacturer: syz
[  334.667445][ T5935] usb 3-1: Using ep0 maxpacket: 8
[  334.678254][ T5935] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  334.688950][ T5935] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  334.702194][  T971] usb 5-1: SerialNumber: syz
[  334.711444][ T5935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  334.725258][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.728299][  T971] usb 5-1: config 0 descriptor??
[  334.766796][ T5935] usbtmc 3-1:16.0: bulk endpoints not found
[  334.881438][  T971] rc_core: IR keymap rc-streamzap not found
[  334.887368][  T971] Registered IR keymap rc-empty
[  334.911004][  T971] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  334.944330][  T971] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23
[  335.396526][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.415342][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.425183][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.482741][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.020137][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  336.205064][   T10] usb 6-1: Using ep0 maxpacket: 8
[  336.400835][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  336.414156][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  336.427986][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  336.451910][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  336.471280][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  336.481089][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.778042][   T10] usb 6-1: usb_control_msg returned -32
[  336.785892][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.802825][   T10] usbtmc 6-1:16.0: can't read capabilities
[  336.816197][ T5817] usb 5-1: USB disconnect, device number 34
[  336.819529][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.892161][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  336.902294][ T8900] usbtmc 6-1:16.0: Unable to send data, error -71
[  336.912881][   T10] usb 6-1: USB disconnect, device number 8
[  337.053649][ T8907] bridge_slave_0: left allmulticast mode
[  337.062280][ T8907] bridge_slave_0: left promiscuous mode
[  337.068586][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.098720][ T8907] bridge_slave_1: left allmulticast mode
[  337.102851][   T30] audit: type=1400 audit(2000000003.059:1178): avc:  denied  { bind } for  pid=8910 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  337.107760][ T8907] bridge_slave_1: left promiscuous mode
[  337.133350][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.164633][   T10] usb 3-1: USB disconnect, device number 23
[  337.171324][ T8907] bond0: (slave bond_slave_0): Releasing backup interface
[  337.293052][ T8915] netlink: 'syz.1.799': attribute type 10 has an invalid length.
[  337.326822][ T8907] bond_slave_0: left promiscuous mode
[  337.349324][   T30] audit: type=1326 audit(2000000003.419:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.2.801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc30018e969 code=0x0
[  337.395425][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'.
[  337.416066][ T8907] bond0: (slave bond_slave_1): Releasing backup interface
[  337.443884][ T8907] bond_slave_1: left promiscuous mode
[  337.544525][ T8907] team0: Port device team_slave_0 removed
[  337.568292][ T8907] team0: Port device team_slave_1 removed
[  337.586952][ T8907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.595241][ T8907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.958193][ T8907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.976264][ T8907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.063775][ T8908] team0: Mode changed to "loadbalance"
[  338.086163][ T8915] bond0: left promiscuous mode
[  338.100553][ T8915] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.113177][   T30] audit: type=1400 audit(2000000004.189:1180): avc:  denied  { append } for  pid=8930 comm="syz.4.804" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  338.137733][ T8915] team0: Port device bond0 added
[  338.384321][   T30] audit: type=1326 audit(2000000004.459:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30018e969 code=0x7ffc0000
[  338.552536][ T8936] block device autoloading is deprecated and will be removed.
[  338.573234][   T30] audit: type=1326 audit(2000000004.459:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30018e969 code=0x7ffc0000
[  338.607705][   T30] audit: type=1326 audit(2000000004.489:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc30018e969 code=0x7ffc0000
[  338.625833][ T8936] syz.3.806: attempt to access beyond end of device
[  338.625833][ T8936] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  338.640727][   T30] audit: type=1326 audit(2000000004.489:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30018e969 code=0x7ffc0000
[  339.238284][   T30] audit: type=1326 audit(2000000004.489:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30018e969 code=0x7ffc0000
[  339.261946][   T30] audit: type=1326 audit(2000000004.489:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fc30018e969 code=0x7ffc0000
[  339.285594][   T30] audit: type=1326 audit(2000000004.489:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30018e969 code=0x7ffc0000
[  339.518496][ T8947] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5238 sclass=netlink_xfrm_socket pid=8947 comm=syz.4.807
[  339.582516][ T8949] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  340.032715][ T8920] team0 (unregistering): Port device bond0 removed
[  341.319908][ T5817] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  341.469801][ T5817] usb 4-1: Using ep0 maxpacket: 8
[  341.472771][ T8979] random: crng reseeded on system resumption
[  341.494318][ T5817] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  341.495296][ T8979] FAULT_INJECTION: forcing a failure.
[  341.495296][ T8979] name failslab, interval 1, probability 0, space 0, times 0
[  341.515402][ T5817] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  341.517352][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.5.815 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  341.517374][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  341.517384][ T8979] Call Trace:
[  341.517392][ T8979]  <TASK>
[  341.517399][ T8979]  dump_stack_lvl+0x116/0x1f0
[  341.517428][ T8979]  should_fail_ex+0x512/0x640
[  341.517456][ T8979]  should_failslab+0xc2/0x120
[  341.517475][ T8979]  __kmalloc_cache_noprof+0x6a/0x3e0
[  341.517500][ T8979]  ? alloc_fw_cache_entry+0x3f/0xd0
[  341.517526][ T8979]  ? __pfx_fw_name_devm_release+0x10/0x10
[  341.517549][ T8979]  alloc_fw_cache_entry+0x3f/0xd0
[  341.517572][ T8979]  dev_create_fw_entry+0x3d/0x150
[  341.517595][ T8979]  ? __pfx_fw_name_devm_release+0x10/0x10
[  341.517615][ T8979]  devres_for_each_res+0x170/0x1d0
[  341.517635][ T8979]  ? __pfx_devm_name_match+0x10/0x10
[  341.517654][ T8979]  ? __pfx_dev_create_fw_entry+0x10/0x10
[  341.517679][ T8979]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  341.517703][ T8979]  dev_cache_fw_image+0xa2/0x490
[  341.517728][ T8979]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  341.517756][ T8979]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  341.517780][ T8979]  dpm_for_each_dev+0x5a/0xb0
[  341.517803][ T8979]  fw_pm_notify+0x81/0x150
[  341.517823][ T8979]  notifier_call_chain+0xb9/0x410
[  341.517847][ T8979]  ? __pfx_fw_pm_notify+0x10/0x10
[  341.517874][ T8979]  blocking_notifier_call_chain_robust+0xc8/0x160
[  341.517901][ T8979]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  341.517925][ T8979]  ? __pfx_avc_has_perm+0x10/0x10
[  341.517952][ T8979]  pm_notifier_call_chain_robust+0x27/0x60
[  341.517979][ T8979]  snapshot_open+0x218/0x2b0
[  341.518001][ T8979]  ? __pfx_snapshot_open+0x10/0x10
[  341.518024][ T8979]  misc_open+0x35a/0x420
[  341.518049][ T8979]  ? __pfx_misc_open+0x10/0x10
[  341.518072][ T8979]  chrdev_open+0x231/0x6a0
[  341.518091][ T8979]  ? __pfx_chrdev_open+0x10/0x10
[  341.518111][ T8979]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  341.518142][ T8979]  do_dentry_open+0x741/0x1c10
[  341.518168][ T8979]  ? __pfx_chrdev_open+0x10/0x10
[  341.518191][ T8979]  vfs_open+0x82/0x3f0
[  341.518215][ T8979]  path_openat+0x1e5e/0x2d40
[  341.518258][ T8979]  ? __pfx_path_openat+0x10/0x10
[  341.518292][ T8979]  do_filp_open+0x20b/0x470
[  341.518318][ T8979]  ? __pfx_do_filp_open+0x10/0x10
[  341.518367][ T8979]  ? alloc_fd+0x471/0x7d0
[  341.518401][ T8979]  do_sys_openat2+0x11b/0x1d0
[  341.518421][ T8979]  ? __pfx_do_sys_openat2+0x10/0x10
[  341.518444][ T8979]  ? __fget_files+0x20e/0x3c0
[  341.518475][ T8979]  __x64_sys_openat+0x174/0x210
[  341.518496][ T8979]  ? __pfx___x64_sys_openat+0x10/0x10
[  341.518515][ T8979]  ? ksys_write+0x1b9/0x240
[  341.518539][ T8979]  ? rcu_is_watching+0x12/0xc0
[  341.518568][ T8979]  do_syscall_64+0xcd/0x260
[  341.518593][ T8979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.518611][ T8979] RIP: 0033:0x7f6c2b38e969
[  341.518628][ T8979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.518644][ T8979] RSP: 002b:00007f6c2c24e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  341.518661][ T8979] RAX: ffffffffffffffda RBX: 00007f6c2b5b5fa0 RCX: 00007f6c2b38e969
[  341.518673][ T8979] RDX: 00000000000c2d41 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  341.518684][ T8979] RBP: 00007f6c2c24e090 R08: 0000000000000000 R09: 0000000000000000
[  341.518695][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.518705][ T8979] R13: 0000000000000000 R14: 00007f6c2b5b5fa0 R15: 00007ffd452e3588
[  341.518732][ T8979]  </TASK>
[  341.913009][ T5817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  341.923580][ T5817] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  341.936976][ T5817] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  341.948128][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.051108][ T5817] usbtmc 4-1:16.0: bulk endpoints not found
[  342.176527][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  342.176542][   T30] audit: type=1400 audit(2000000008.249:1205): avc:  denied  { ioctl } for  pid=8978 comm="syz.5.815" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  342.454486][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  342.614193][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.624170][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.660534][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.676716][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.721030][   T10] usb 3-1: Using ep0 maxpacket: 8
[  342.845930][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  342.873145][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  342.930648][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  342.950901][   T30] audit: type=1400 audit(2000000009.009:1206): avc:  denied  { ioctl } for  pid=8993 comm="syz.4.818" path="socket:[21119]" dev="sockfs" ino=21119 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  342.975615][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  342.987476][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  343.000982][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  343.008884][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  343.057486][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  343.069587][   T30] audit: type=1400 audit(2000000009.129:1207): avc:  denied  { ioctl } for  pid=8993 comm="syz.4.818" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  343.096000][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  343.107416][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  343.138414][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  343.149669][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  343.161482][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  343.182379][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  343.194033][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  343.216640][   T10] usb 3-1: string descriptor 0 read error: -22
[  343.223335][   T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  343.232642][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.262417][   T10] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  343.355153][ T9000] netlink: 'syz.4.821': attribute type 10 has an invalid length.
[  343.365085][ T9000] veth0_macvtap: left promiscuous mode
[  343.381460][ T9000] batman_adv: batadv0: Adding interface: macvtap0
[  343.387909][ T9000] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.409845][  T974] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  343.422647][ T9000] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  343.613196][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.624606][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.643309][   T10] usb 3-1: USB disconnect, device number 24
[  343.653127][  T974] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  343.689599][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.737151][  T974] usb 6-1: config 0 descriptor??
[  343.790362][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.799070][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.823721][   T30] audit: type=1400 audit(2000000009.899:1208): avc:  denied  { ioctl } for  pid=9006 comm="syz.4.823" path="socket:[21142]" dev="sockfs" ino=21142 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  344.032565][   T24] usb 4-1: USB disconnect, device number 46
[  344.081105][ T5817] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  344.349895][ T5817] usb 2-1: device descriptor read/64, error -71
[  344.359884][   T30] audit: type=1400 audit(2000000010.429:1209): avc:  denied  { remount } for  pid=9009 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  344.360986][ T9010] Invalid ELF header type: 3 != 1
[  344.413186][   T30] audit: type=1400 audit(2000000010.439:1210): avc:  denied  { module_load } for  pid=9009 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  344.579498][ T9015] FAULT_INJECTION: forcing a failure.
[  344.579498][ T9015] name failslab, interval 1, probability 0, space 0, times 0
[  344.592437][ T5817] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  344.739902][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.3.825 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  344.739941][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  344.739952][ T9015] Call Trace:
[  344.739959][ T9015]  <TASK>
[  344.739966][ T9015]  dump_stack_lvl+0x16c/0x1f0
[  344.739997][ T9015]  should_fail_ex+0x512/0x640
[  344.740020][ T9015]  ? fs_reclaim_acquire+0xae/0x150
[  344.740044][ T9015]  ? tomoyo_encode2+0x100/0x3e0
[  344.740067][ T9015]  should_failslab+0xc2/0x120
[  344.740086][ T9015]  __kmalloc_noprof+0xd2/0x510
[  344.740119][ T9015]  tomoyo_encode2+0x100/0x3e0
[  344.740146][ T9015]  tomoyo_encode+0x29/0x50
[  344.740168][ T9015]  tomoyo_mount_acl+0x314/0x850
[  344.740189][ T9015]  ? kernel_text_address+0x8d/0x100
[  344.740209][ T9015]  ? __kernel_text_address+0xd/0x40
[  344.740232][ T9015]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  344.740286][ T9015]  ? tomoyo_domain+0xbb/0x150
[  344.740302][ T9015]  ? tomoyo_profile+0x47/0x60
[  344.740321][ T9015]  tomoyo_mount_permission+0x16d/0x420
[  344.740344][ T9015]  ? tomoyo_mount_permission+0x14f/0x420
[  344.740369][ T9015]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  344.740409][ T9015]  security_sb_mount+0x9b/0x260
[  344.740434][ T9015]  path_mount+0x128/0x1f20
[  344.740455][ T9015]  ? kmem_cache_free+0x2d4/0x4d0
[  344.740480][ T9015]  ? __pfx_path_mount+0x10/0x10
[  344.740503][ T9015]  ? putname+0x154/0x1a0
[  344.740526][ T9015]  __x64_sys_mount+0x28d/0x310
[  344.740545][ T9015]  ? __pfx___x64_sys_mount+0x10/0x10
[  344.740574][ T9015]  do_syscall_64+0xcd/0x260
[  344.740600][ T9015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.740624][ T9015] RIP: 0033:0x7f5698f8e969
[  344.740640][ T9015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.740657][ T9015] RSP: 002b:00007f5699e66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  344.740674][ T9015] RAX: ffffffffffffffda RBX: 00007f56991b5fa0 RCX: 00007f5698f8e969
[  344.740686][ T9015] RDX: 0000200000000280 RSI: 0000200000000340 RDI: 0000000000000000
[  344.740697][ T9015] RBP: 00007f5699e66090 R08: 0000000000000000 R09: 0000000000000000
[  344.740709][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.740720][ T9015] R13: 0000000000000001 R14: 00007f56991b5fa0 R15: 00007ffdbb1dcc08
[  344.740745][ T9015]  </TASK>
[  345.191984][   T30] audit: type=1400 audit(2000000011.259:1211): avc:  denied  { execute } for  pid=9016 comm="syz.4.826" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  345.232130][ T5817] usb 2-1: device descriptor read/64, error -71
[  345.370152][ T5817] usb usb2-port1: attempt power cycle
[  345.510352][   T30] audit: type=1400 audit(2000000011.589:1212): avc:  denied  { write } for  pid=9018 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  345.530015][    C1] vkms_vblank_simulate: vblank timer overrun
[  345.729851][ T5817] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  345.802752][ T9029] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.096852][   T10] IPVS: starting estimator thread 0...
[  346.281366][ T9031] IPVS: using max 34 ests per chain, 81600 per kthread
[  346.382685][   T30] audit: type=1400 audit(2000000012.309:1213): avc:  denied  { nlmsg_write } for  pid=9030 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  346.937009][ T5817] usb 2-1: device descriptor read/8, error -71
[  347.072138][  T974] usbhid 6-1:0.0: can't add hid device: -71
[  347.128651][  T974] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  347.168262][  T974] usb 6-1: USB disconnect, device number 9
[  347.197759][ T9040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.831'.
[  347.488966][ T9043] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5238 sclass=netlink_xfrm_socket pid=9043 comm=syz.2.834
[  348.181580][ T9055] tmpfs: Bad value for 'mpol'
[  348.442661][ T9055] netlink: del zone limit has 4 unknown bytes
[  349.500295][ T5935] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  349.704980][ T5820] Bluetooth: hci1: unexpected Set CIG Parameters response data
[  349.715071][ T5820] Bluetooth: hci1: unexpected event for opcode 0x2062
[  349.776943][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.789064][ T5935] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  349.804043][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.163233][ T5817] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  350.572942][ T5935] usb 4-1: config 0 descriptor??
[  350.605021][ T5817] usb 6-1: Using ep0 maxpacket: 16
[  350.680810][ T5817] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  350.698988][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.811386][ T5817] usb 6-1: Product: syz
[  350.817465][ T5817] usb 6-1: Manufacturer: syz
[  350.827113][ T9084] binder: 9083:9084 ioctl c0306201 200000001a80 returned -11
[  350.859015][ T5817] usb 6-1: SerialNumber: syz
[  350.867863][ T5817] usb 6-1: config 0 descriptor??
[  350.880740][ T5817] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  350.987643][ T5935] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor
[  351.006600][ T5935] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000F/input/input24
[  351.019845][   T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  351.091422][ T5817] ssu100 6-1:0.0: probe with driver ssu100 failed with error -5
[  351.153330][ T5817] usb 6-1: USB disconnect, device number 10
[  351.194593][   T47] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9
[  351.212737][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.247088][   T47] usb 3-1: config 0 descriptor??
[  351.267073][   T47] pcwd_usb: The device isn't a Human Interface Device
[  351.363405][ T5935] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  351.671178][ T9082] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  351.695824][  T974] 
[  351.695832][  T974] ======================================================
[  351.695836][  T974] WARNING: possible circular locking dependency detected
[  351.695841][  T974] 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 Not tainted
[  351.695848][  T974] ------------------------------------------------------
[  351.695852][  T974] kworker/0:2/974 is trying to acquire lock:
[  351.695858][  T974] ffff88801b4990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310
[  351.695888][  T974] 
[  351.695888][  T974] but task is already holding lock:
[  351.695891][  T974] ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310
[  351.695917][  T974] 
[  351.695917][  T974] which lock already depends on the new lock.
[  351.695917][  T974] 
[  351.695921][  T974] 
[  351.695921][  T974] the existing dependency chain (in reverse order) is:
[  351.695925][  T974] 
[  351.695925][  T974] -> #2 (console_lock){+.+.}-{0:0}:
[  351.695939][  T974]        console_lock+0x7a/0xa0
[  351.695950][  T974]        do_con_write+0x152/0x7c90
[  351.695961][  T974]        con_write+0x23/0xb0
[  351.695971][  T974]        tty_send_xchar+0x25e/0x380
[  351.695982][  T974]        n_tty_ioctl_helper+0x209/0x2b0
[  351.695996][  T974]        n_tty_ioctl+0x7f/0x370
[  351.696008][  T974]        tty_ioctl+0x6f6/0x1610
[  351.696017][  T974]        __x64_sys_ioctl+0x190/0x200
[  351.696030][  T974]        do_syscall_64+0xcd/0x260
[  351.696045][  T974]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.696056][  T974] 
[  351.696056][  T974] -> #1 (&tty->termios_rwsem){++++}-{4:4}:
[  351.696070][  T974]        down_read+0x9b/0x480
[  351.696085][  T974]        n_tty_receive_buf_common+0x85/0x1980
[  351.696098][  T974]        tty_ldisc_receive_buf+0xa7/0x1a0
[  351.696107][  T974]        tty_port_default_receive_buf+0x70/0xb0
[  351.696118][  T974]        flush_to_ldisc+0x268/0x780
[  351.696127][  T974]        process_one_work+0x9cc/0x1b70
[  351.696138][  T974]        worker_thread+0x6c8/0xf10
[  351.696148][  T974]        kthread+0x3c2/0x780
[  351.696156][  T974]        ret_from_fork+0x45/0x80
[  351.696165][  T974]        ret_from_fork_asm+0x1a/0x30
[  351.696181][  T974] 
[  351.696181][  T974] -> #0 (&buf->lock){+.+.}-{4:4}:
[  351.696194][  T974]        __lock_acquire+0x1173/0x1ba0
[  351.696210][  T974]        lock_acquire+0x179/0x350
[  351.696224][  T974]        __mutex_lock+0x199/0xb90
[  351.696237][  T974]        tty_buffer_flush+0x72/0x310
[  351.696246][  T974]        tty_ldisc_flush+0x64/0xe0
[  351.696261][  T974]        __do_SAK+0x6ab/0x810
[  351.696277][  T974]        vc_SAK+0x7f/0x310
[  351.696289][  T974]        process_one_work+0x9cc/0x1b70
[  351.696299][  T974]        worker_thread+0x6c8/0xf10
[  351.696309][  T974]        kthread+0x3c2/0x780
[  351.696317][  T974]        ret_from_fork+0x45/0x80
[  351.696326][  T974]        ret_from_fork_asm+0x1a/0x30
[  351.696339][  T974] 
[  351.696339][  T974] other info that might help us debug this:
[  351.696339][  T974] 
[  351.696343][  T974] Chain exists of:
[  351.696343][  T974]   &buf->lock --> &tty->termios_rwsem --> console_lock
[  351.696343][  T974] 
[  351.696359][  T974]  Possible unsafe locking scenario:
[  351.696359][  T974] 
[  351.696362][  T974]        CPU0                    CPU1
[  351.696365][  T974]        ----                    ----
[  351.696368][  T974]   lock(console_lock);
[  351.696375][  T974]                                lock(&tty->termios_rwsem);
[  351.696382][  T974]                                lock(console_lock);
[  351.696390][  T974]   lock(&buf->lock);
[  351.696396][  T974] 
[  351.696396][  T974]  *** DEADLOCK ***
[  351.696396][  T974] 
[  351.696399][  T974] 4 locks held by kworker/0:2/974:
[  351.696405][  T974]  #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  351.696430][  T974]  #1: ffffc90003c57d18 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  351.696455][  T974]  #2: ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310
[  351.696482][  T974]  #3: ffff888059ac80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0
[  351.696511][  T974] 
[  351.696511][  T974] stack backtrace:
[  351.696518][  T974] CPU: 0 UID: 0 PID: 974 Comm: kworker/0:2 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) 
[  351.696531][  T974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  351.696539][  T974] Workqueue: events vc_SAK
[  351.696552][  T974] Call Trace:
[  351.696556][  T974]  <TASK>
[  351.696560][  T974]  dump_stack_lvl+0x116/0x1f0
[  351.696575][  T974]  print_circular_bug+0x275/0x350
[  351.696590][  T974]  check_noncircular+0x14c/0x170
[  351.696606][  T974]  __lock_acquire+0x1173/0x1ba0
[  351.696622][  T974]  ? ret_from_fork_asm+0x1a/0x30
[  351.696637][  T974]  lock_acquire+0x179/0x350
[  351.696652][  T974]  ? tty_buffer_flush+0x72/0x310
[  351.696662][  T974]  ? __pfx___might_resched+0x10/0x10
[  351.696677][  T974]  __mutex_lock+0x199/0xb90
[  351.696690][  T974]  ? tty_buffer_flush+0x72/0x310
[  351.696700][  T974]  ? tty_buffer_flush+0x72/0x310
[  351.696710][  T974]  ? __pfx___mutex_lock+0x10/0x10
[  351.696726][  T974]  ? ldsem_down_read_trylock+0x11a/0x180
[  351.696740][  T974]  ? tty_buffer_flush+0x72/0x310
[  351.696749][  T974]  tty_buffer_flush+0x72/0x310
[  351.696760][  T974]  tty_ldisc_flush+0x64/0xe0
[  351.696775][  T974]  __do_SAK+0x6ab/0x810
[  351.696786][  T974]  ? mark_held_locks+0x49/0x80
[  351.696801][  T974]  vc_SAK+0x7f/0x310
[  351.696814][  T974]  process_one_work+0x9cc/0x1b70
[  351.696826][  T974]  ? __pfx_nfc_urelease_event_work+0x10/0x10
[  351.696843][  T974]  ? __pfx_process_one_work+0x10/0x10
[  351.696856][  T974]  ? assign_work+0x1a0/0x250
[  351.696865][  T974]  worker_thread+0x6c8/0xf10
[  351.696877][  T974]  ? __kthread_parkme+0x19e/0x250
[  351.696892][  T974]  ? __pfx_worker_thread+0x10/0x10
[  351.696903][  T974]  kthread+0x3c2/0x780
[  351.696911][  T974]  ? __pfx_kthread+0x10/0x10
[  351.696920][  T974]  ? __pfx_kthread+0x10/0x10
[  351.696928][  T974]  ? __pfx_kthread+0x10/0x10
[  351.696937][  T974]  ? __pfx_kthread+0x10/0x10
[  351.696945][  T974]  ? rcu_is_watching+0x12/0xc0
[  351.696957][  T974]  ? __pfx_kthread+0x10/0x10
[  351.696966][  T974]  ret_from_fork+0x45/0x80
[  351.696975][  T974]  ? __pfx_kthread+0x10/0x10
[  351.696984][  T974]  ret_from_fork_asm+0x1a/0x30
[  351.697001][  T974]  </TASK>
[  351.698161][  T974] tty tty1: SAK: killed process 7197 (syz.4.317): by fd#3
[  352.942071][  T974] usb 4-1: USB disconnect, device number 47
[  353.663863][ T5817] usb 3-1: USB disconnect, device number 25
[  353.780266][ T5820] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  353.788530][ T5820] Bluetooth: hci1: Injecting HCI hardware error event
[  353.795505][ T5828] Bluetooth: hci1: hardware error 0x00
[  355.859858][ T5828] Bluetooth: hci1: Opcode 0x0c03 failed: -110